<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="5582">
<package pkgid="89e11f4bcbf9ff016db373eb173b1a358e571f91d004c24ecfd3309a50f2f6eb" name="ImageMagick" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="b329a5be18c9a893e4aa0e2422b6302f957f1a9bab7b1b3cf42018814b0147ed" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="2cfe44f6afc1d2471613668dd9306e62979aab0a022001b8421d75a0c23c7d57" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="a9603b212740d2aade97da3dee222e1b6f1ee3de45487c051ccf4502f7b21cac" name="ImageMagick" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="718de846259fffcebe34e43a601edc0a0cdafd41356d1f53c98879d4539799b7" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="dd9ed69227950d0da942271fde00922057981efa69f4b69843a48a4a6464b9a0" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="fec192b79fdd4ae3626e255d76913bd88eaf4a97a894e176ecfe56e8ab45e51b" name="ImageMagick-config-7-SUSE" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="a8fbfb275bc0b83bfdd6c62b67fd2437630d7395d404fd1ad383874cebca80ff" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="68cac5ee2ed15fcd76505ecf2cefae8bd86230d62d49a3b43f81319ed9d04b14" name="ImageMagick-config-7-SUSE" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="a466f53b049eb6c29ccc322a043d6a347a60522c21581e1995013185d6c308bf" name="ImageMagick-config-7-SUSE" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="56f593473d1e16c064931a915ccda07e52a6271d91a3c3374bbeedfee8e54030" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="97b9d0cab37c1610afb4b7d1abb8ee9e6c446c626cfe9fd7ce7c8f787b2192fb" name="ImageMagick-config-7-upstream" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="9fa3100979fe485d201d7044b4e727bcf87a6d6ade1d1c4684879ae8e5104937" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="c5943174901442c3a437a11ac59d31871c3dfd1b860e8c6656978fd5221b21b2" name="ImageMagick-config-7-upstream" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="a80ae7befb41c456b49e79d5cb7d1819800a4ed182d7faa210f106863cc803b9" name="ImageMagick-config-7-upstream" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="f778a0359bf5c87ecc8d596c2e6557756fdb119f34c43ba2c802a5c5c5c1d8c3" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="15c74a1176765fb3f90c6612bf605f7390a4a73677c6576387c74cb53acb5b1c" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="28405824b04134a85c1d02b2a000fd1366b41733e2618b7c1cad5b2907437539" name="ImageMagick-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="8b5672cef18214697f9f569919bfcbfc1885db251e97dd5f89080c4784f7553e" name="ImageMagick-devel" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="168130f67929a2888a76c7d0ef6d201420d714a4fdfc18f97f1eaef01ec5f4f3" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="befa1457058ccdc20695a2931e2e043103d3b9ff82a223816f4bd269c4393cce" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="d1557fe84192765e70d62676738cdc0b098cb1ced74c840e33c91b57280f8e41" name="ImageMagick-devel" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="0f1adda88fae36f495b0074e9a526d0eaa2b742931758cc462b93bd8889cce81" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="6cb9c6ea1b7f7a5ae73edfd2a3754c99059e827f8bd4e24b58201fd86425dfaa" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="1fac5542bc88d114799bf92fd20fdbe3a3aade276f49fa9dcbbab8c8b4e6d781" name="ImageMagick-extra" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="dd44b18247db15909c66c9d25e7c7a82163b730ee0390e08d39f74c96755502d" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="6d529fe141dcb4655f838f90a6a92d295dde5e41dff03afa3dd5cb552f601804" name="ImageMagick-extra" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="d776bd6c2e5a70cebb0bbfb4cbb66919b167ded13ef3d0f1748f4d63d2063186" name="ImageMagick-extra" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="60333257184219cf4fabf0a9c98376e8ce841987b0f2d3df889991eefb9f3e35" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="3374abdc6fec2fe6f76c925a16b394a560cf644b0ba96da67dfe9f4dc1e728b8" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="5e4fa8338be0fde3de5dddceb8f3376e847b85c630a7ef9989375941c8500f99" name="MozillaFirefox" arch="i686">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="9f515903c7ef0c855ba21d258a38233653539297848dc502cdaa027b4ffb8c99" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="132a8363730700d4cdf3fc0f69cb584bf166f3e0c60c030e3d3772aba17e1c5b" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="118050a41e0304a2dd302298af12bef244bb9ffb3768ed6ef211506e61e6631c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="ef0fcf27a2e67099d767b68578c03367a226f984fc9e6c1cee0bfd4e7b4a8e1c" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="b744634b100f2ab7d7005114c7d3a009e3dfeb780047718b5120291bfae6f55e" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="1076e83021e6a372fd18b35f9440c97d2f3ceb7e46a3e1efbb61314ec2806d31" name="MozillaFirefox-branding-upstream" arch="i686">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="c310ab316994115d2819aade9fcef455a270842bd52e6058d52a7f334923475b" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="f5bced4ddcf24ecc5de91e43297b311019f38a8ceed95e0c830e9cf69e14bccd" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="6ec0d736fcdeffdaeac2282e529b186c1c5b483a8047613d05757a057e1de1a5" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="8817b9634dc33fbb120200d20e5e521c629237100096dd0d78da8fdb1088e52e" name="MozillaFirefox-buildsymbols" arch="i686">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="16ccff9d9f3535d29a2add2cda550d5e3855046f20920dd9fab8d899ff372a21" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="3373ca23661c83a083e658d34871b3fea09193e0c552f1dceb633f0b33a62506" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="d9b09db30d64d57daf6cbfca07e3b06f96fdaa5dd6d01b21719ce64953ae70af" name="MozillaFirefox-devel" arch="i686">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="dcc5d17179ba01ce8101654e4903d3bc988433760f087e94369712368c89d82e" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="613bd1448ac3d8a4491528dd2595ef2530b53df831d639223faf4ae133a68deb" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="481031c297419c9dffb71961318006835c4a5f3ea098b6c175e8f6bc682c1870" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="6f511b0fcffada1d434ef6845a82e197b245f002fdd55e88ebbc4a525f524389" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="e8a565246045f6a0efc5505accc25a881b9caf364a859dba65f82d20d0dec76b" name="MozillaFirefox-translations-common" arch="i686">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="719484841349583969f104c15ea92031ebf4587157c08e822618f747496afca6" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="7721f5bd7b5e7fa235e47f5347c16c2005b9bca50d73cacae7c7b5ece019d070" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="5dbc9c644a479ed6cc4c13bb480dab369253e5f9784c30d88d0768ccea4e1306" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="d1598543229dc358418beb8cb093fc5c426ea21e2ece316153ea526818387478" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="28fd9b2cd6c57c6a8e70d6f351e1347b33eb49a7c7d75cb2e4b52f45270f160f" name="MozillaFirefox-translations-other" arch="i686">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="a6546cac70baf60b789c831d15e7678bbc4b6714f489c97e21acc9c09e37e89d" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="1dc43dcb255aa76f58dd53cf49e975fa3719a381c4c48ca080a1da899fc23fc3" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="9ce47dc3ea22c9a8a0173537684d08fc67e41f02eed764c9f35e7fa30c8e4984" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.113.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="cee756064649749e887bd66b66d222043869ba89b9828013bfc4976418f7afb6" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="ead186558d7c52c7684f1bb7c758353a66860925e3d633e1e8c6e3a9967fc8b3" name="MozillaThunderbird" arch="i586">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="6f94d38d831817bb5e74e41b8ec64d129acf9007f073dbfc7029a36a1a1fba60" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="feeee8505c068e0f23034d3d9a4c4ccb1b8353456b7c279d47fb0d061fbd10e4" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="a9fb0e3097fdaac7095d88d52e3986b2a3e656b17c08a1977ab67588ed38c739" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="3d2967d79c889d521c89c60ff9a116116fba3b48bdce3e17612e2c6ad57de068" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="2f92f9a5c66780454871d7db49c02cc3bb8bd23b5d6e54d0ee9fbafb9d25440a" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="f5bf648ce0cd265a6b84404c75040cd078b883bd2064bbea6a565130b179b450" name="MozillaThunderbird" arch="i586">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="52e7543f58dfc964d2129351078c9dcf71ecc48be93a929ee5f3004c8fabc5f5" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="3ca63bc529a3cdae0e1db7a47104f8441f2dd98768fd32bf649604ee49a70c6a" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="a679c24da1c9c9a40fd9cee1d6d2a76b68a624e962a44abe9ab27dcb3917968f" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="895674bf39b3f8c3e93bba90a1a207f696a3778d722910195c8c8a686b839780" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="ae8e7320c5a77a1c7c946944c184c151c4d333e25484959c3901830b427206d6" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="f3e5cdaba4c6e6125a80d857f3e2a3ee7ba67196960848d36581981402dca0b8" name="MozillaThunderbird-translations-common" arch="i586">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="9ec92d753242bab8c24b14d303d48f271ed5779050b7ed5255a210c72962161d" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="8a1cb50328ba4fefa4c35aada19f278543fe979e8aadf635efb7aea7cdac55fb" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="3cfe350fdb87c6bea431a35b14baebc633ef2bcd3507fcf6e314de83f63b1ef2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="2653419492f750710648d16b92b3b7ee2e55188acddd20fab6e88c39953d6eae" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="9f392d7912133f669b4579364a8417bca6ef9f69a3c48e6dc0797822f3d2701f" name="MozillaThunderbird-translations-common" arch="i586">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="76c446c628ba48215756dd0cbcb72eb1f78f2e4b9e07029712e30e334545f46f" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="9117ff6a3651980502c2d1962e38281b6d5b5d96fad78547baf65ea4bba7946e" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="2db2cf8f2d40e9fd13ef6908a66f5f6aea8df877029595db3e5fdfbcc084420d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="b384ee28e49f0b8977a71c2c199f7f8fb56174be9b16dfc14616d6b14e8f95cc" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="569a34addb712300acfba227c7eb3af51c45f08fd25889ad7069007f3b48dc1c" name="MozillaThunderbird-translations-other" arch="i586">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="e9355e8410a074d2aa49336754cf80cfc7b727268dbb46bc59830ee0320d102a" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="f91eb9225dd23e696c014c5c6f6c5be73e58d5659d6eb606af5efe1914cf699c" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="e6689b71b75d1902cc21df80ae874b467bfeba0aae742d57672000dcc166cbf6" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="ca87563b68902ab273e8ffc40455d48a262b3bad8eb27812814c46b6ce0b8ffc" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="afe3445e91d9b27059e620587184c56cb7583e2cce23288792b25aea1002c9ab" name="MozillaThunderbird-translations-other" arch="i586">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="21d7fc0812e2548fe4e9c2c9054e2e6e023096b3d4e7b32bb81b4313c1bac358" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="f20e554edfe8ee54d76b5b9859b541322e0e2f33de3cf140f64c33f12b0673b7" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="15091d450bc46b46df4c1e37682f2b22c38bd43b5d3d9dfd97c70a2e80e5dd70" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="3.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="e65e6c28d8fe8339492c38169452d257fc5fc456ba872789b95d474259105b78" name="SDL" arch="src">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="aeed9c6114a16b8f779a3b7e16e96a7da2833269c2c5f27714e15adc58f0c3fd" name="SUSEConnect" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="3.31.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="ebcc59181d772e15da6a041df266910211369896131fd613ed3a226d2c3fa778" name="SUSEConnect" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="3.31.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="cc160773026ce162f10fc9a34ceb973b2fb8adae9cd5f427f48de12902ff63b5" name="SUSEConnect" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="3.31.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="87b4e42c53308b279b072b9c9ca843d73d0d73b91fee6c8a443bc2fb65336809" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.28" rel="3.31.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="f44aeb720386c16d9ba75c6f7da98b149b6deddbf6675826c677db3fc93ad126" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="3.31.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="f26f1b60bbd3c337a72f27c2d5648b000f2804cb5b7d71568e0f3e7034eb06c1" name="adcli" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="44e13098a0dbf14d4556684959da16394160d173ec12d66caf8a5545fd81f706" name="adcli" arch="i586">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="1453c5b7f95953db55e326faa8ac9600441830bb5e1bc2c68f71b3ea79db0caa" name="adcli" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="40e57ea088baa6432a105607b1d1a45a96e390bccff53b1c6545497197af1774" name="adcli" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="09faced4e2f4ac468c649db80686757530767c8f32b2f00a305636ac0bea4360" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="65390e2698dc3d9362546c5db287916bad604572c43df449c8aed12b58773f89" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="22be1fd0c01bcd8cd6757e686cf106c9e812d25470630c28027604eb3cf0868f" name="adcli-doc" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="fd4efea5d92852c8c59a07d6d444d93b56757b813fb413983ea7b6bc0c60f2de" name="adcli-doc" arch="i586">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="eeb00ee0fb7f673d423d191d61923fbba6dcda82677eca29f5eab38e329d239b" name="adcli-doc" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="c484f7c20f74c094fdd81143f925b879f39217d9961e26759ccb9a155a9262ce" name="adcli-doc" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="dc25e1d8be3e8dd11b8cce9c191a36dfd725f480d1f9dcd55c02ae4c3dbeba33" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="1.12.2"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets database after changing the machine password
  (jsc#ECO-2613)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
</package>
<package pkgid="6ac7bf42b68c64cb01b22c1357376fb57357e29225fcd4fff44aa452286662c4" name="amazon-ecs-init" arch="aarch64">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="3d05ccb7f44d4fd62a13686c7b3dd495da1ac360cd7adbe55138505dd822c7f6" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="2a4a9511eb7dc17fdfc1b4ed30a13a98ead8a925ce61436836679e1ebae83103" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="f7680263b8e51cc663fdaac343487cf343f912a1ff416c2a168904185a054c86" name="apache-commons-httpclient" arch="noarch">
  <version epoch="0" ver="3.1" rel="4.3.2"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="7d8dc6e4e5d217c7ebf3a86b9ed965bbacf31d5e1250eaffe0cce85ea0016869" name="apache-commons-httpclient" arch="src">
  <version epoch="0" ver="3.1" rel="4.3.2"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="874eab8188f4622cdc93f9d04ddc78b3209298734356083c3785ea5f7d8b8d5f" name="apache-commons-httpclient-demo" arch="noarch">
  <version epoch="0" ver="3.1" rel="4.3.2"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="cd1298fec0b608c2b650afa3c61e836906d65f6b1493ff09ca0175ae1f36dbb1" name="apache-commons-httpclient-javadoc" arch="noarch">
  <version epoch="0" ver="3.1" rel="4.3.2"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="28a3b89726501f13290e9e50c83e8250ada19f508535d775be8e69962d7d5af6" name="apache-commons-httpclient-manual" arch="noarch">
  <version epoch="0" ver="3.1" rel="4.3.2"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="pmonreal@suse.com" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="7bdae6fe90dcd69c998327c2375b97d5f02e807b28ca5778a29496e744264c70" name="apache2" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="74b8ff1cc891b06c72becbd4941006e3d5923512a3c4130fd2d49737c79471fb" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="609e423058121af2e6d7557799df623fee2a6a1ba83d1aac8706ef4f745ec340" name="apache2" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="28b0b4259939f6b94c45887ba6528a6f4a796569f6d27316d2b78e171ca1ab17" name="apache2" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="136d92f94a98dde9419326849ef5d6257545dfb4ce5deb28dbd57eff0dcb013b" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="080c82c1f9282e07a8ea866bc1716ef01a412a589bed1af8cd589f29c287178c" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="e2b04bfe236df7d0f985ac33405cdfe98fc104b32f2b2caff484ba225ec70515" name="apache2" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="1c0ae54dcccabddd8b9e40beada2cff4be560771a24cf8c8035f709e402194a2" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="b9246b6bfb28f4e1e5df9037693d63b1191c2b1d55e7875112e0202d5e76e00c" name="apache2" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="eb1bb9f33e0544e86561df716a2a5123a5cbcf0cc7d8c80addc27cf4e2a39e63" name="apache2" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="38eb2cf62f1926442169bfc99717d2349c67a50b670ab5a81e21aaea121baa7d" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="8074e0a73a7d2dd4662bf1637ee9cd181f4beeef06ba9f495406eb7f96fc6bee" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="f02a2049d4938d282d69cd83a8c6572269522288ecfe33c6f18c5688c40a3304" name="apache2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="86eb2434a638597437b5cad213aa8213c190182eda68b4e52a09e3750a595983" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="00a18e68a2033808ad8382d3aa0670863b161dacb83283b8f8daad81fe2e4d72" name="apache2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="0b7fcda9d77cf97c4df5ab36f53d3c92df183e80ee1e02e2a69a4fbb83d08dea" name="apache2-devel" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="54ac5c29716a9aa4be60630c193f80d640549f13269eeebc6c5ffdf56ca879b5" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="7ef8b80f6cde50a9537eb6a6f8b52ae617fac3ef36c77be69008bf2073492af7" name="apache2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="8540f836c764bdc5dacd5f90ffbfeaabaf1508fb7bb8cc263d890f484a0e5755" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="20296d65a0d2f3681cba9d6948270395a7c3e358c6b023cdaf072ba85b30fa11" name="apache2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="d5609fc4a15a4d921b3cc769879ba6bfa120b9859cc6981640a323333d2e6c9a" name="apache2-devel" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="67cc76a1a553f793b8781262c18cb935fe3581c10909b5012a6e8c515d3b3165" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7df38675c73cc190dad7b3f72d5a6eb84f8919250aaffc7986f4ff74cb644dfc" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="bc72dfbe2615940abc142dc35297cfb00accca1b5f92698fe03c0f92e8ad2ab9" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7be9fc8b2b6c0817d96482ed425ed4162286a429558a7a6b7db51f6be00d9df9" name="apache2-event" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="ee35db858f7feb75d29486e0cf0cf2f9cd15da9ac5758bd169e2bb02a9eaaef8" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="15730a802c9dd9a3906b829ee7c43f626da3bf700b41ca7fe5d92da3758d3da0" name="apache2-event" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="219c7be62d7b1d702416e4b4e53d4e20cda99fc4b2fee8228db922e5abd09558" name="apache2-event" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="732e43d86285b973b6c5e0d04fe4585d93786f41141492f788b9a924a5e7a4c0" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="ec66d42df1c882cccaadc69a9c415921d688b3d1e4f33f2de7f698fdeb15a1ca" name="apache2-event" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="f9d91e60ff7d0dea8f97a5477308aa5fbf4e8853895994556b745310099aa00a" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="db1b54cbcbd0902cb948c1eed7d6fa1909f4504009d78b095dd1e0b4613915e4" name="apache2-event" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="5c65793302a70f9786508be2c94ba385311714d3d7d1b06492736ce37b92616d" name="apache2-event" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="c0bf1396bbe10c02d4ee2675481c48332814b9997fd0568a71856af8cac41f96" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="f6c75fb0ec3a67a3709ac8f4f54a145fda1be49cc8faa557ab7cc8a5b8857141" name="apache2-example-pages" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="8cb9a667bf9829fd48f83dea010801c34088aae760d324b5a99195305fe66f16" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="ffad8145a13e1e62b973762700de0c05339b9d32e6c739af7ed1bb94b200bed7" name="apache2-example-pages" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="cfc34f747c84db43057c430a1202f83a404e188e81d33bd434546ffe7b21459a" name="apache2-example-pages" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="cacdbb9da249ea0a9f6fb8fbac93ab16789fb3e9ab7dc40fc0c03fa92a9d124e" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="4ad57336c400009351ad1181b8a5c93012b0214c816a0bcc59b6d7b5ccb45539" name="apache2-example-pages" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="6d3d02351147d690bc3ca2c28ef9059e3200497ff65fb57d7e812547b9914891" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="da5f3120d9369178fd805bc25f1aab353d0bbf01f2027b85bfdd8d9ff7b82fa6" name="apache2-example-pages" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="fcb42ee26c8e51e2521f06daa7102324a6ecfe84410bf53f922b2257018fd767" name="apache2-example-pages" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="0621bc5db248bebdece1ba30d1436c46ba552e82302da3acf167b480aa697c22" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="cce567e4b0c2d84fad9050c4a1c4ccb10e1e682caf128937b39143569a8ee387" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2462aafabf8a155870fc5c84a9d2cbfff392b0d052748692ebcfb4ef2903e3a9" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c94424c0f706a47704e2362bf0cc43175f914d9297e680f300266a03c564b46a" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6d38819bb0cf953cc4783a30c501515ccc4cd0db6708d5c4054c71caddc518ae" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b5bfc978efbe3541b9c13b71f7fdb0e31a20db82da64de34165027f01644998b" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="fa65e7722bdf89efd2cd42f4618a4ea6d2253adc1fa5b2e7cf8ebe8588fb507a" name="apache2-prefork" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="3d43baf54aba6316b0fa6ee3984d3ae839b09bb2cd0b8a78c0aea69f2d14ace7" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="96e7318e2f03685d5fbc9a468d5e25fa4b63299d509c9c7ce17375d96d09f70e" name="apache2-prefork" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="43d5f617bb212f0b1676b40ae8d2f88cee056a27296a8730e4713a677a0ff931" name="apache2-prefork" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="7907e76397b5324946ef4609dc2923cc9fdc46022ab9bd6326aa1cb05dd5a955" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="59a5b513230d300914df9b894513defcd122b8dd3327c0b926eba31725ac5e80" name="apache2-prefork" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7ebcac6497ec27aac4d58cfce87e09ea00af0d3220e0df12df7d5e57da10633a" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="e9392a0eb8fe7150ec0676d8256e31248bd48f11891a01cd5c4ff45aac7f0d88" name="apache2-prefork" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="931151701b993161637ed9c64875d22a2dbb51dc5f24aae36805955ccd4b99fa" name="apache2-prefork" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="ec4b42c50e5d8aa183dc3808f9a96aff82bb28b0fdb0c7eee53e87091870a656" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7c5595c825e31112491c104e42feef12ee23a3245f38eef0c2a8edff4498f111" name="apache2-utils" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="154100574370165790c9721ef302691db56d8a762cbac5b1b5fd474c4872cef7" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="ff30cf89e93351e6f34996d1b6ed9256f5e7c60feac8e0f2ff2959a29f7f2987" name="apache2-utils" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="3f9bc17a89db41f7569299c8790a00b1e33954ae77dd3825d7b6cac4ecb65a8a" name="apache2-utils" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="0e881e9e6cd198433423a10f9f1a9c7e3f1bd7580ec7df49ae17d37bbd4cbc24" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="8cfbcd9635455c6bb418fcde0b97bb00fc066a13770a35d0f1148ad139302151" name="apache2-utils" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="1990215e7a2e8645430bf7cd023f4e8d6caf4e5483c85a45236d9de29cdd9d4b" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="6d1a05f1227bf1651900b94d2cd07fd8744b5b22dc078c1393aa9fae9d64df7e" name="apache2-utils" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="894130ec40a221a1d16e9384b07355e72d3e9d4bc3876c668199ffb3224d4f09" name="apache2-utils" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="0028a17c37c6f82493b283c0c19ecca09bf67552e8324d97032fcee7a6814925" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7a5357b3ddae6ff524155efac913466c3eb3d75a25881aaff87a820f3ff9b6b2" name="apache2-worker" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="2caa8473c35d61e32bfba46672840928dfcaf7f6ed2818239ca577bca4483f8a" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="1ebe5041711967efaf3bc2c1d7fa4985040c398466c70594a18fa692ee7cb952" name="apache2-worker" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="9943bf5d02784933854a284c7018256c70dd5cd2541f36773650ea1f19bf2534" name="apache2-worker" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="9f89d7abaf25cbeb5915490ee7f9eae6b5da0545dc7e664f269da455e6a43b56" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.38.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="a466a0acefdd0db266c1cc14c284efb1a65c9524acf26d05f1b7d77e767a491e" name="apache2-worker" arch="aarch64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="aac54ac455a8426d5befb3c191bf8596c1663f5999bbf47829ae1a2a556aa6a9" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="af41bd4ab02786840657159c293b10695c824ce1208feec86e2422f7b164d14e" name="apache2-worker" arch="ppc64le">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="749a9035d9f6e3320cf3d9aa6101064e50641d7eacbe1705c1f211c915dffd2f" name="apache2-worker" arch="s390x">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="26174f11d8aa81a07dd45c7e5f5354e31329d9c605307804dc4e58022e4fc1eb" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="3.41.1"/>
  <changelog author="vcizek@suse.com" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="zzaimeche@suse.com" date="1580212800">- Fix for SG#56598, bsc#1162027:
  * apache2-mod_ssl-clear-error-before-certificate-chain-load.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586174400">- security update
- added patches
  fix CVE-2020-1927 [bsc#1168407], mod_rewrite configurations vulnerable to open redirect
  + apache2-CVE-2020-1927.patch
  fix CVE-2020-1934 [bsc#1168404], mod_proxy_ftp use of uninitialized value
  + apache2-CVE-2020-1934.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586865600">- added patches
  mod_proxy_ajp: Add "secret" parameter to proxy workers to implement
  legacy AJP13 authentication. CVE-2020-1938 [bsc#1169066]
  + apache2-parameter-secret-proxy-workers.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  really fix CVE-2020-11993 and CVE-2020-9490 [bsc#1178074]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="fcce4355383880ce01e10575898acf10264577bd6a923c2b0b9ea7d51b69226f" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="63e2a3424da02d50ab82260cb97284423d0d65267d3614c07503d774814a57a6" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7d2097c6d5e38e81e2157a0380d940c36d81f1a34ef0c2fea9bd27f45e88d237" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="feb9c9382c44ea071ec5dff5373dd28ec37e87d8c84b27d4b22693606f798b0c" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a948e080c4ffb93bb4094db76fa0188e43dc8f0359e1d65170e0a9e6b07b2de0" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="520c5eea9c7cefa54956e046e6c88ceba6f8f156e835d41df013b42948b37f73" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3a6ec5542c47ac2fe0ba7391d74eeb7d9f239bc5c91cdb1c19e8c5f99139764b" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="d598a7e6842b914015725d22220016f7d11e5cb26100a64664e6d9ed8dbb5670" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="43737b73c679df4f58222b6fccc1e2bc990cca3de188ef4b5fbf8e4f11018a11" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="9e7d59eb13f6dd587e2b9dab850783e46f2821b6c3f4c9b5e6313020535e9cdf" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="09bbfd83261d47a747e9f32de2808f396122daea49b4ee92b276e72e0c8671ba" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="79afa455ba4bc82763ed9b3f5dae27ba78a2603d38c73b29735671a7d7785ffa" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="91c123a953ff89753d3f9dc69bda1322e59ed2a4fe268d666fcd87433d4e4b84" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="19b555d64d1c268b8cef9847a779c0f449cd2f828993826130fd7b253cf36b94" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="92b1650b623c81260bbaa99e3187cc4a5fe6b9921db21d4cecfd76066659e234" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="23f8231fc5dff05bb9bb7b56716eb96816f71464208b537cb0eff7eef3141735" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0e642b4545859ce271199024da0749a0653f14b26e21e5f6055835fe19cbe6a1" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c37982afe149007feab2788cb9778043c096fd0229b4d80fe81a04989e264145" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="6278de3728286a03a1fa8ee72a2438138df6cb347d05c0ab71892e0c18b803e0" name="bind-chrootenv" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c7de292340e75ab40d3233c340da45eb247a7ec7e03897544a38529309494c4d" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7db9b61ab99ece5b767c22efd20260a6b429e24f5b397d823a7dde0a2796b118" name="bind-chrootenv" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="8c6328961c3e4fd9e079506cfc4da8df0a7a5e5cebabd00df7d553b292fffdfd" name="bind-chrootenv" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="9302edc33f7becf8dbcc7a514e02dc160f1d29ad1e5ff62d590d097f3e4281aa" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7fb9bb7c5000a5c3e15f38fcc7079e6d32020ba8ee3b743406831c1144ed5716" name="bind-chrootenv" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="121c7fad9aad509c30540224930ce29364a56c9d78e9e50003922d57b4756331" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="edebccf529f402abcbad4f55e56399a9c7578cb8cf8091151f1082f4a02e8eb3" name="bind-chrootenv" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="445e48686e2eeeb5aa24f8d5d9b1c7e74b89171e2183d589776bdc9678bf8daf" name="bind-chrootenv" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f8383fd74cf453dec7ceda54c410ad6fd9fbf2af1a92c175d2664e16fc2e20b1" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="bb8bfb9db160da355aef00a6a54e10490f3e2c700254ec19c970359f6d820f61" name="bind-chrootenv" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="e4c025858bafe3ba93bb2f0a82633ef520b30d054722357a48b9333c823abaf6" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="9fd8f80ebae78b0f193f8073e27e4615dd3f99a5e05b6f2dc7d7dd69f44011be" name="bind-chrootenv" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f4b7beaef57298d5622d81fc0c1a0ae6dcb0cb930394a287c3193cb9c6751c93" name="bind-chrootenv" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="8948cfdd5e1950546e768d2fa89f1cfc6f3c41129b115fc3b00133516c41cec3" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="b3d777528748d52f80104d1c201a5fe6d5126973234e3aa127da3445388d7301" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="8b157ecdfee445edf539b0891533b66af880865295a26f139a21288fd22c80d1" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="4402eb01a94af13907766bd2b4a8c6de320355c3302a9780d6b7494dbb55e8be" name="bind-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="81cbbfb27ecfe51e12acc40fbaad7907e8135ce2232967b52ee235cba31917db" name="bind-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7724561aecdf4b92146e8f0f8830a8acbd1266f0249cb752d5cc00e3296d39b3" name="bind-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="94420ffc0d067b31039dfe4b30a9123d26296a78e360674c7463e7c25cf577c8" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="50ebe71701b857e840fee4536e2c9f2e1659ad9e491d2e7cfd3d0dbac5bc35f3" name="bind-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="298828c9dd3e3f890d0007a83d67ccdf75fc6811328bf65cecfc8be96816e4e1" name="bind-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="aa5d75b5d4adca9c3193789bfdb41bcd39e2dcc2823f6cc2b4508127911240af" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f4d294fa70cd9ac687eecd32a7cfdfb5c759e5c87c06424c2b2b84b5152af959" name="bind-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="17f3f7b20582e0ff7f79415ec4bc798027299837cf06a6932106e629ae8a57a2" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0cf9fd0eebda416716f2bd90431fa71e8fbb83cee55da7d43393a8806d46b88f" name="bind-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="20eb5d0aad42448cabbe11c92a719a5cb9b0740dcb35da7a26e4a971bdf19f63" name="bind-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="151ab0c1bb400624329ba77c2c02e1106fc6b91d94d7843d571961077e43972a" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="ebc1bc401f8ffec8168b168e85ad137aacc578ccfa0262178b2af9781197634f" name="bind-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="5cbf0f9d5e4b8ea78d6448caa6799f07b254447bcf344df510a2070e07f8bfac" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="6e474dc867012a6df2fb7de11dce34154aa1402f3b8bf6cdac1de937a64b480e" name="bind-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="649cd59dce9f57df588b9b25a11bb379f3f5ae0ed3d18dcdfbdf49cce9893d91" name="bind-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f006393a721aa2cee00cb31ecb81db64721ba9d519adf4080a4f8277032a1b5d" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="d2b2cc6657826521ca27c684ce54a2112b5a61293fe76a41c7e4a06c24f98652" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c60b69f9fca6cffbc670c57fa8ae11a0e6dea64ee0909a78af08eea1710ec71c" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="eb0c7c62d42f44ed4db60076997df235e90d61efe127eb0ec0183862f7411374" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="40ce959559779eee1c30eff8adf6d100d3b8f6bf25b26a895395ac0a7e62ea7b" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="ab40f5b82927414a94b26f9763c67eba11ae8134666eb2d7fec616dabca9bbd9" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c574f95e746db50281d21ade1f6aa5ef46924f999b1d2878f24dbd23f471e7d5" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="27906d473be7626d7635fcd8d26ef61b77ae67f76960fbbe68c2ac216a368edd" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0407d41089296325eeb7d6ed05b2d717cc9241b267ee7fcd1774fa33e06e44b1" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="638d3fe4840ad57961705c47e7d413b493d71d92fbed7b66255601c2185e511f" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6469420a90b859eb3d9a1a6a930cff5f7cade740a2517878c8c5b3f8627c539f" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="89a1cd694136427f0ce44c8f38f2978b3a74f9de3c4e281ca387f22d146d08a4" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="abb6d89dfb9b9849da3eb5a3a59b694d879ab7a095a3fb00b1d0048f9666ce39" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f294b50e47cdaffc45ab16d0c75758752429cad15165ddf4cba0e2e1de0856f9" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0efe2837903ae5b41a0f7272b04befc385862fb7c81cf65d3192fdedc626980f" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="75ea9077c64141b6909b9d95835cf0ed0989d7425fc1c614ced0eeeaa1cf5482" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0966b43260dee81b19e9257e8769e9fcbfa3385646809903868524af48a3f13a" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="94934f5cec0e7a7e1ad4330c91038cacf9f44725a7ee4f1af9f1e6e7b1474797" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="61acf4365cf2f01f0b179ee59671e71fe276fe5df4238eacd4a993feb0db343f" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f2121a2f764d675e3db8752d00ebf7eaf2e2c1361be8475c2d3a5da50ce6a729" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="f7fe3d5541b18b58da37fd147af0e3b6b79a282e9c077b0a1d84ea86c644bf99" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="d5f379c86843974720432b3a8961414359248db64453d5bff96405bf5a2c3e75" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="d3567f4edbebca422e399c9c9d77cd984c3773bcf10d3b759e793d633183eabf" name="bluez" arch="s390x">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="a50b4e2fcd77bf470e40fffafe838d70e6400c48740996f54051e906303a02f3" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="788e86f07c8ecd5869e2aa8d922465b395b942ddadff5cb56a83b027639e9aa8" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="7de7c97dc374d05063962c2b2997a65c9a8f94ec620515ce9996780aad9f29e4" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="9ccb828cc371cffcaf9860acedab4215023485bbc5683ac9b836bf3420b5df11" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="21a5ffa815db7cbd6deac2fb15183e31391884e8d3e320613cda8fcd913aa900" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="a582a4ce828fd6c386222c812cf46882a5010d8a6d7128c457bb4f44e6637970" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="767ec5ddcfd80d652a0fba6e9c98a8fc1c65acbeef5c766f4028aa5f5c6586d8" name="bluez-cups" arch="s390x">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="76a732cb63b4fa5b6fda04593091be70f04b54cfaf0841b72a4b81242abfe85f" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="4efadf3d409b19a50244311979b0fd4d49305aed203d0c1f4392e7cd306e61b1" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="6d505dadfda2e976fc5d0853993ff3756317449db3898ed9baa48821160d3394" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="197bd0e4a8e60661077dcb4fe89fedafeb1722d07bfa3fe2226188f9903d77d2" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="5f958fb44680dace6ba9a60a44821f6aa2e1e3379320c60ce77f1de57c66c2b5" name="bluez-devel" arch="ppc64le">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="c7279e3343d95c88dd21b7b34e70668988b68773a7f2b7353ebcac1a7677ea06" name="bluez-devel" arch="s390x">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="096ab2803f049b2943d6b4a6a643328befb9547397243b1acee8d7010de7b865" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="a23d6e6de04cf2db6320ed6695bf20f0d391993f389b6add250d3464a2985759" name="bluez-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="bfad2195ce6e59499dd1332bc7eb9c08825c1393fab344505e17f78aaa213fbb" name="bluez-test" arch="aarch64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="a558a48fbe27ec5834ee3649ac88387619e4611b039f13be91148fe6f5725b58" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="c68a689c2525232fe43c14eeae69739a4af54b8f28b77f28ca14f180e1960827" name="bluez-test" arch="ppc64le">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="3099226086e5f33d35092daa5dce95009b558d02042a2e0403237f2e7073e503" name="bluez-test" arch="s390x">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="b536f95acad6966424f1eb142af9badcaa6e1cad22cabdfea942eb854afb92a8" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="819ac12f4f1d233eaabc8eb177fac3b4fa10df68357cba1d12fec6904d1fd757" name="branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="bd3b519ee55241664ff862000c3362a1cbdbc94ced826f1fe8dafebe1ddb716a" name="branding-SLE" arch="src">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="120056f1898da5e7bbe26be51c19ac5c64790c6d969f293037ce0808d2a3e576" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.44" rel="4.29.1"/>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
</package>
<package pkgid="bd08505befa1997f2d70b38a4fdf39405dae30704d9e4327f87e9fdbbb9ddffc" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.44" rel="4.29.1"/>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
</package>
<package pkgid="ac375c5ffab32a3475b25ba990603a89f0b5304727a625a011d1679272c3d23b" name="catatonit" arch="aarch64">
  <version epoch="0" ver="0.1.5" rel="3.3.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="c91d35dd91a0b9a39c7fe0b498472aae54e1945ab2ffb5ee3417a7f33ff80f43" name="catatonit" arch="i586">
  <version epoch="0" ver="0.1.5" rel="3.3.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="d9c3aa01d81eb1da0a7e3ae34dfdc32d0f06d2d45d9460087d61f3c073311ecd" name="catatonit" arch="ppc64le">
  <version epoch="0" ver="0.1.5" rel="3.3.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="72cdd5195f67ed3ba5388591bd659615f397c16ae1445f13b5ff25ccb3208084" name="catatonit" arch="s390x">
  <version epoch="0" ver="0.1.5" rel="3.3.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="7c42410128a7cec0b466c054b29df5832cea04f54edd5b2ca244f0e434b75a45" name="catatonit" arch="src">
  <version epoch="0" ver="0.1.5" rel="3.3.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="15367ba27f251654d4d02b0bfa45a10ef1fec372d907d23fce3b6e9778b0270a" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="3.3.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="020a566425056c90c83fecd8e125e503bda339665b7d03014844859a8c1a22e4" name="ceph" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="842616d2732378ddb3b4c01b57354f6464e1224dc3ca5fd8a959e73c3eddd4bd" name="ceph" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bbb41b9a98bd6904355913a0e3d1c12593e933d00ae9ad3b50978511a384f7d5" name="ceph" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ada9f9ca4445e8cff6c9dcf86a8288f236f5ab8e3cc44ba6a9c8d8cb9b72dc97" name="ceph" arch="src">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6b407802a41d53aa198f8b8fe19b3f9e6ac1c942be148b7a4fb79a151c47da6f" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d497fecfb99be71bfdfce72b8277d2c496ce82b70b1fb9627914c586aef93a54" name="ceph" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5c648ad31c684672abb59eb5998f9edfce411cd10bf2adab11807c7f6eb69c67" name="ceph" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a4ef0c10d5d59211861a4150feee759773febcf5d4fc16e8a9d3df4e1f603d5e" name="ceph" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae94f247135551828ab8e815059098bbbb33d4df0b8fbdc74e60d715fa66554a" name="ceph" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c4741ed744a9af710487e99a514f51645778a7b6b3745eff03e8d180b5c144d9" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e08e1416ad31c668b60b81d640c39177cc94bad02abd855eaf70a02082bd57b2" name="ceph-base" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2c0348021445a35b19a5c6e444f846c6b7c23e0e6accc5be183a18461e2da233" name="ceph-base" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f18f3132aefbfb765be59064caf0674c0a33dc483edbc59517864b680ae41519" name="ceph-base" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ec849102c9f98bf80ccd6d6084a86e6ed4eb5fe5c4267512887d48a92242c808" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d3c856df5ed6cb3e060dbbf2c43becad24ee94dd79c36b917e84144b6398b2f2" name="ceph-base" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="583b0aa56bf71b4edc17d77cb798325189f30d0a35d5e3d8cedc6309a03d869b" name="ceph-base" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="58352676522070ccf35113093851a1849e1dd99a70ccc4ea05fd76b9213509b4" name="ceph-base" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cf8ca10556c6e783c2d1373d718c11a417e58088ea50648d40dc9cb2355e867f" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="afc12ad263a86fe2b529d253937c66d58e71fdc1cc4925432a7dffb5c8ddd1d5" name="ceph-common" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9cecc56869735129baedc5aacdc1f4ab1fca4fd952ddc15ed50b7126e6fe7ee1" name="ceph-common" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a988ee9a75281c5ce6e56f1866d0c9351e31b84d81846803a2e42db97f8cfec" name="ceph-common" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="76429eb23344aaaa5c6f15856e488060e74536a8a2456a0d4ddf3ff16a735591" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d8f7dc3be048989466723ab64ecff1fd95faaa90476d66c61ebdae963530a994" name="ceph-common" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ff43a824bd29d0746c97ff158f21d152a9dec650c1735eb77755f9843929396e" name="ceph-common" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ad4e9e531059f0c85c3e9b4432b2d6771a8c71db0bd18a1b320c9ffa203db751" name="ceph-common" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f179935aece025026b57eb963482d42c70322a16389f6f9c433cbaff920f8a0b" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="51d8412d9ccad96fdecd01939bf13ffe15aa58768d3130555d030433e3cb075d" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae27aa2ae8f8a71b7d70fe34b34e84d97dc1b40a1fb4c24b2e22c599abaa7cdd" name="ceph-fuse" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6b290f30acc017e00547c2f4ba05c26b75048eeb958026eea5da174250cfd785" name="ceph-fuse" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="565553fa7ab2c9a4a47c65f0e373ea3805ea54712ce177d111e1e8110c911c77" name="ceph-fuse" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="70e7f143188b95a986accbedce7139a840f60f15e410c2ac5edc366bf1bb8176" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7ed0914062c5f34ca402ba59ecb4a712627ca75f17b0ba41f9a9268afbeac1ea" name="ceph-fuse" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="842f02862bbf2859e22a751636241f85b26d70c7cf888f91739790d66fe2e616" name="ceph-fuse" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6a29026ff365d03ebefbb17537afb2a99b536b4563f916fd127e888f6dd050e8" name="ceph-fuse" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0616840d433d9e4ec48373680cbe8203373d9bd302096c1c3e3e028302342e0c" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="11f2854a199536ae069c988a095376273340b7cc2b9c92824d8e0391edc209c7" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2a6fa905cb0ca91857d35415a3702a4c53d4acedae461f88b41fb3fcc07d548c" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="edf7ee77a7e47deb0e973882868a5b7cf1449990638074d73c145644ffa0645e" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e7d764e6cf6b3ee7c64efd57db6e44aecaa4232901d9339ad7b79a84cb46064c" name="ceph-immutable-object-cache" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ac1a2848341c807a481dbf46fcc51772b90ff0cd45c0284da9df0601088e7844" name="ceph-immutable-object-cache" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f3d23b7e5ed2662ae6a95b7daff4a7f75c64e7686973b560c050eaa6dd8fde72" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0b452445525b8d62055e27acaa0236cfb450e55102c5cd1a4d41acedd3ef9cc2" name="ceph-mds" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8834fedb8df2de59307598f629f7c41206c065768fe92b6781572eaf07f6c34c" name="ceph-mds" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="596138256b3e358ca900406e8f97ba9f7562c68386e877e385daa237e7bba827" name="ceph-mds" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="00ae480d89c40240bbc81e399d8cebfe94277f0b076370b79301fdcb742a14ae" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4be275e97b4bb9a84021f867b4b2259890d79cd667ee66eeccd4c3c1b0a158ff" name="ceph-mds" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2f6e0e895b98be8474e41f687179f69aaa2de9243a7920581faf1a90dedd9708" name="ceph-mds" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="756f0e954632c945d36d1dd7d90cf1e120a05cd87bf4ae1a2a9b7c81db1c16ef" name="ceph-mds" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fb7cc53aa2d3359dad1f51c137550c3abfa25bee20785bed0a14e2ee76eb1d19" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2d427d1e6bec3a778973578e8790ea7a06d2e5c7429a2fc06aa3fb55447e83f6" name="ceph-mgr" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="148578bb823c597cc2cb7a7572eed9f71ef75d64b163d94e07e1f49a2449aa11" name="ceph-mgr" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="59868945ab2ba541992df074052c73501b8281b7ec4cdc14f38766807c8acbaa" name="ceph-mgr" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae892ff655fd9e6aa74a03dd895e6b4d411fdb6bfa4ba46df59e56bfc6b02ebc" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9c47f82645b0c982b94f45a2e0b6815b5264a84c8b5829be814c1e45c57e6c02" name="ceph-mgr" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4b1e0dc9acc08eaf9802088d98c5b31e9dc1a09c5f6f8e3e88e6dee28766f0ba" name="ceph-mgr" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3c0a81a6efde0f6a5a0b916cf7d64d15b716f94cde31d7262fbca5e9d58de0e8" name="ceph-mgr" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0e13e71326dc905f27a4bd50adb07f084402a7f52e2122aac58d41849789862f" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ead20acf9e3cb48a7516465bcfd216cbad765f3ca95ecc61f60d033e3af35a0b" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c64955fa99dea4639dff4d1d8cadf20e001e05df7c79c1c1b8d2b3827a3afa3f" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a2a82a1762fd9358b8561a8759f3e1ad50c873bd6c0d8d9a981ea6b0b38abc1a" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c7a03cdd260b12a052725d9f5fefcd52478631b15733071b7f3f4f26b46e1792" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e4744a1675dda73fd566a5ae7cb4bef06c5dae1082174951e65aeaae3c797af6" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3009f1ae86171d0fbff3f8b2fd5d4247601653dc09b46c0af0c687913e65966b" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="345b4cad61e13346efd7874c6570a352bb969f0e6ad53201a71bbab809a33fa9" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2f96a1ffbe148b9489540ff65532f3b58b4e5770f3cbccb8c819bc2766132b55" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="858132db3f8fcb422e0eb84e2936f28bf9f504266927ac7250e9827482e9777c" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="18a6896b3c69076ec1e14754151f35dbcfd494a151bfde2055929177e9bdf22b" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc82fb7f4624cf667043e58f0e458daa2bbf1d31f9d1ada0f24df8450f3b36f4" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dce5ad28e3b3cd093b592526b89693f9371442accfdf15fef70822d112144d70" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="076b68434d31ee26bde4426f8706c7ba551380353e52459bcb078a9a9353ab97" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4e32a24c4b0d39fd526eed4d9a10aeb9c4d83270f1579f0bd5e35d99639cd3ce" name="ceph-mon" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1b5fd3ecb9499bfd5a83256cf09586476988d8d07cd4ba11b0c97cb7a102e39f" name="ceph-mon" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8e545f34baa01fd06e1cf033be83799e6fd9e16c2b3124f38b487cb2f7f4e9d2" name="ceph-mon" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="411dc66eedd63a5d140903104e44cb5764b529749a04ad601d02f322c142f24b" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b1d8658e18e9588411b73f8c683632059e64118d3ab9b85045c5feee961554b4" name="ceph-mon" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="07963f6051dce5a58bb6e9f6af2246de136ef05e8608b868939e2aec299c6ffd" name="ceph-mon" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="338f81636019883290222757032d2a467afdd4bba1540672d29e487a99ea4c2f" name="ceph-mon" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="762e9e52e7761c1e7a6f37e21e34841c15991125d826a1b8a0ccd53d78887024" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0d14403660f63375e9c86e29952ca0872c896981d73f3fca8113fb622037726b" name="ceph-osd" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cba270af5235fc074d8300d7786fbd771fbf1fe92875c6ff4b9d04202b7cab4e" name="ceph-osd" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="88edd701d744c0886912e0a520e7731a2ae21021a5e72b4ea5bb23f0f737c686" name="ceph-osd" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d062a66561f66244b919d87101e8b6e42e8b725716a3f09ff508eaeec979eae1" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0d4f6756520527c6c76e6620deebd49648ee8fa4ebee4907b5322f2b9c3eb9fd" name="ceph-osd" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="93d6891042a102853422b645faa1410d748c93f1d78cd2b4d12569c067bd3520" name="ceph-osd" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a3f06c075d210d6e21eb4aa59d02b4af14d2e7fca678323009850c0a6941dbe" name="ceph-osd" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="06d232b921bc29b0ad941ca2196fa317f90cf878071123543856c9e1b83b8ba6" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a4a8972848fc8d09c227aa22c6b114c2406d58023940c5796e06fceea96d343a" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b6ed354071d392fd31651d2c37a77f6ea8cc54c4584e1c7761d97d239a33f7fc" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5df5ae23bc10ba3ba8e2e30071e09e9c5682474b2fa24448ba02b66337278216" name="ceph-radosgw" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bcf62d4917fcc1723d5efb791a1b4d22d1104a3132ff47436e88e9a5c0e95a44" name="ceph-radosgw" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2d09a354a9a1813f3337e6673f96d7dc83216fb95b4d243942ec4f081c3f2796" name="ceph-radosgw" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c797a381146f4eeb715af945e6c03fac341c304effde60f6bed0f6d6addbe555" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a1f30998e870c778604e664b73b5fc2014757836dbc94d3be212b39e42f9326c" name="ceph-radosgw" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e7cdd64c7ac0d2b720f1ff6a74501b79c22933ca2d994b78d2a18dd40fcb1083" name="ceph-radosgw" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e28a5a185a15b5845abd91e6bc93518d8c5183eac47e5f2fb5428c5b029eb7af" name="ceph-radosgw" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6adbca70826bdf3641e934448d8cd63f4e53dadc24e9c2c5c0dc0c744bdcf598" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ce09edaaf195957527d9bb49760032c5bbcd0cd84e3f3eaefc584d973f5f824" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="691be495545821fa980f38f25c35a6af4bb207e356296cf5ce7cbfaba8a5052b" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a302359d59603e03f4e95b457795d55661bca8b4661c33858873008831c769b1" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6766ecd41fdf367943d70d3e0a88b5320d4d3909ee591e298b28a04df2a0a8b1" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="900a292ae8ad2685b1fa97db8831c41125af2d8695fb37de2f147a74c8f6a5a4" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a933b233f6398478f075299a0f71fcb25833b3a96168edc2568c386e9659f546" name="cephfs-shell" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bff42b57f6a27ac2ddca2bca2ec4d854afae297333a213a53016889282d2f15f" name="cephfs-shell" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c0029745d81281023dc361258209ac962161ebf8579b96aa98792315280340e9" name="cephfs-shell" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e5a745c9eebfe65aa72795cb40e01a78a4609a7a7718d45cdb0e7cd5b97d1aa7" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ffeface111699ef28558326b5fb26a01a5749382ad8197d70ba9b2c65d3a6e8" name="cephfs-shell" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2ae3fbd82c137d9ddb62c986706dd4530b9125f6516696149323ad749ee1fb9b" name="cephfs-shell" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3920626d14c89571ac37536a458a083d8ab0e4fd818d9ba8af7191fef867ecf1" name="cephfs-shell" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bc69712ccdfdc24200cc783f867a326bde5ec6d3b8007eceab2ded2f17d0ff0b" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="03de2ba8a5aad60d2a83b1b9fe8e02a53aec5479ec9787de64d88e9c83109a2a" name="chrony" arch="aarch64">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="9140ca259d29efa1039e33d2194888c8ce099cc384e247527a959abc8d3fce52" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="a6097898b52b1652bd98af6d881e58072ea8ac3297674d01f5d7c4d6c80075fa" name="chrony" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="72e55dc73b2c007855916d8b70b06daab3e5d75964e1c0960452245c728150ba" name="chrony" arch="s390x">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="4c3e557e90a717c2a433bb3b62df5b5be9261bce15e213ed6c4990ea809ce99d" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="724cdf290a6402ac803a44c17f0eda4aa58af6a2d6d9e375973a28a94f3b0a95" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="1fdbaa59136b41f37db76833a51cc0d6dafc8dce7e3d69510bc1978a09e29332" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="cc70ce9406007d413add6e5227ab4e6328b8be13fcda3288c1190765982c202e" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="acaa54e8a6c66948000d45a5370ba5d039f783669ef4ebe20944bbd391ae8074" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="9.18.1"/>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="beb7c20ebe61ef96e90b0f740f0d2c500cef050e7923e9f667e3bda36fd0906f" name="clamav-database" arch="noarch">
  <version epoch="0" ver="202010120012" rel="3.366.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1596974400">- database refresh on 2020-08-10 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1597579200">- database refresh on 2020-08-17 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598184000">- database refresh on 2020-08-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
</package>
<package pkgid="1c154c025f7ef771aecae9475cb00d085a2f3aa9d46ee01ccea3d3cc94b7a096" name="clamav-database" arch="src">
  <version epoch="0" ver="202010120012" rel="3.366.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1596974400">- database refresh on 2020-08-10 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1597579200">- database refresh on 2020-08-17 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598184000">- database refresh on 2020-08-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
</package>
<package pkgid="5296d5b94abd024b88a34216e66bf0d91f10a4ac81c0bc5c09ca92f85b90e90b" name="clamav-database" arch="noarch">
  <version epoch="0" ver="202010190017" rel="3.369.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1597579200">- database refresh on 2020-08-17 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598184000">- database refresh on 2020-08-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
</package>
<package pkgid="5719ede1b0da42d3ecf0db42cfbd509ae245d36477dacb8b093c9ab966921ab4" name="clamav-database" arch="src">
  <version epoch="0" ver="202010190017" rel="3.369.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1597579200">- database refresh on 2020-08-17 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598184000">- database refresh on 2020-08-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
</package>
<package pkgid="3b483b389564fb4dee7e64613dc41ebe33befdc4a996370fecd9df2cb1920013" name="clamav-database" arch="noarch">
  <version epoch="0" ver="202010260012" rel="3.372.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598184000">- database refresh on 2020-08-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603627200">- database refresh on 2020-10-26 (bsc#1084929)</changelog>
</package>
<package pkgid="b1c8cc9352ba63c2df8f3a261bfb5d2cfdb027e8f1f51cd6fc9195e8f3114363" name="clamav-database" arch="src">
  <version epoch="0" ver="202010260012" rel="3.372.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598184000">- database refresh on 2020-08-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603627200">- database refresh on 2020-10-26 (bsc#1084929)</changelog>
</package>
<package pkgid="be8f4a84f4a3669041c751aab1778c45b1dd5212262c99987b3e983241346487" name="clamav-database" arch="noarch">
  <version epoch="0" ver="202011020017" rel="3.375.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603627200">- database refresh on 2020-10-26 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1604232000">- database refresh on 2020-11-02 (bsc#1084929)</changelog>
</package>
<package pkgid="259cc7ef3b4402d732c7d1a8833d2845620f28c76979b5a0784aa313593428f9" name="clamav-database" arch="src">
  <version epoch="0" ver="202011020017" rel="3.375.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1598788800">- database refresh on 2020-08-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603627200">- database refresh on 2020-10-26 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1604232000">- database refresh on 2020-11-02 (bsc#1084929)</changelog>
</package>
<package pkgid="1717f80d3d45819e85baf55ed3e4f535f2c9daaae64c58491729a8347d36b69a" name="clamav-database" arch="noarch">
  <version epoch="0" ver="202011090018" rel="3.378.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603627200">- database refresh on 2020-10-26 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1604232000">- database refresh on 2020-11-02 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1604836800">- database refresh on 2020-11-09 (bsc#1084929)</changelog>
</package>
<package pkgid="0dee6f71bd16ebac3f86c8f2cceb5ed0c9b609ef95b05ce1446fc5d75bb6a583" name="clamav-database" arch="src">
  <version epoch="0" ver="202011090018" rel="3.378.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599393600">- database refresh on 2020-09-07 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1599998400">- database refresh on 2020-09-14 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1600603200">- database refresh on 2020-09-21 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601208000">- database refresh on 2020-09-28 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1601812800">- database refresh on 2020-10-05 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1602417600">- database refresh on 2020-10-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603022400">- database refresh on 2020-10-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1603627200">- database refresh on 2020-10-26 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1604232000">- database refresh on 2020-11-02 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1604836800">- database refresh on 2020-11-09 (bsc#1084929)</changelog>
</package>
<package pkgid="e9e5541783aec2aa9bd840656b5fefc8502b5720bffc0c43dd592b3d321be4d5" name="cloud-init" arch="aarch64">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="562c277ffd104260019b4581e81e333448ede1dbe1c374f1026da75f0f28740d" name="cloud-init" arch="i586">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="2d816d0bf38e75811aae03fca7836e4fb5c9195cad7ca63ae680cb8aad194c36" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="a59403f79123c91378c09b51a383165306a95623af31ff2294be7b4e969de26d" name="cloud-init" arch="s390x">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="cc4ed08ab0c1074025968122748d68dbeaccaad45d92097c7dbe0ef5f9fc5209" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="71669e8dbfe9d27a93aa125f9524906b2bdbae89c41cd9cc63dab6f380a3574f" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="edae48461789ca5e58f0bb9165968101a80ad5beaaa4fb4ea592ef28fa3ad4df" name="cloud-init-config-suse" arch="aarch64">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="4ef36abfa72b033a2878f3dc29b509d8c4b302a1b7c9cbc8d5acdacb466afad4" name="cloud-init-config-suse" arch="i586">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="0eb86898c86e8bb50799a6f2a0aa7f87b3e511f0bf24fab7ff76560574e1441e" name="cloud-init-config-suse" arch="ppc64le">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="00c053506b90ee13f27458c0e280738041b31ca54777f9f4b1bb405d319e82f0" name="cloud-init-config-suse" arch="s390x">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="2f3ea40ba56a23e653e0a1f42b7431b06352c8183ff81559012f2a2846d1c3f6" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="98bee252abfe56257230e23aa69e8b5a195ed4553a894f83bc1adb5fb89cabe1" name="cloud-init-doc" arch="aarch64">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="e4a0a92fef8c661681adb7a8f844a9fc23333f3e549ac590b42bbfb7349b1615" name="cloud-init-doc" arch="i586">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="923b359eaecdf8e9d82945bf518e5aa55c742b5d3b2ebda409e858eb2b4b082a" name="cloud-init-doc" arch="ppc64le">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="4dab293ddb6bdc0f46bcfbe06080ac969eb3cc4c3cd7c3cb23a5e78886fb4659" name="cloud-init-doc" arch="s390x">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="490e7d38f0ec5327315c010415b5fed5e62364e0403e945581930edd5dc4f56e" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="5.36.4"/>
  <changelog author="rjschwei@suse.com" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="rjschwei@suse.com" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="rjschwei@suse.com" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="rjschwei@suse.com" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="jgleissner@suse.com" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="jgleissner@suse.com" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="mloviska@suse.com" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="rjschwei@suse.com" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="rjschwei@suse.com" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="062a507c3c025a66e7b44b860e5c9856214cef2ed510af0a3ca11802b13aa7f6" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="9.1.4" rel="6.40.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1576238400">- Update to version 9.0.7
  + Fix crash with a stack trace if no current_smt is
    present (bsc#1158664)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1576238401">- Update to version 9.0.8
  + Properly handle IPv6 addresses in URLs</changelog>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
</package>
<package pkgid="242c9be0d470d20e580c9943526dac204e4d82295a3d2f35510555886e0f2752" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="9.1.4" rel="6.40.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1576238400">- Update to version 9.0.7
  + Fix crash with a stack trace if no current_smt is
    present (bsc#1158664)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1576238401">- Update to version 9.0.8
  + Properly handle IPv6 addresses in URLs</changelog>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
</package>
<package pkgid="fdeb9d719c006004e57fb596efeb58fc5ad11d20ce5d6ff9c73921701b0f9fc4" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="6.40.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1576238400">- Update to version 9.0.7
  + Fix crash with a stack trace if no current_smt is
    present (bsc#1158664)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1576238401">- Update to version 9.0.8
  + Properly handle IPv6 addresses in URLs</changelog>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
</package>
<package pkgid="6ed44e2998616e309e21af5054de172307660eeb3d3249554d5eefcefa8ace85" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="6.40.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1576238400">- Update to version 9.0.7
  + Fix crash with a stack trace if no current_smt is
    present (bsc#1158664)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1576238401">- Update to version 9.0.8
  + Properly handle IPv6 addresses in URLs</changelog>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
</package>
<package pkgid="e5c2aea9c59167386308b51a9cdd78e039cf89f2d55850f27f4c6477dacf5d4c" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="6.40.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1576238400">- Update to version 9.0.7
  + Fix crash with a stack trace if no current_smt is
    present (bsc#1158664)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1576238401">- Update to version 9.0.8
  + Properly handle IPv6 addresses in URLs</changelog>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
</package>
<package pkgid="b2141f410f0646c525090ae053a91f9a0fd9757520ab672a696798494c1d2008" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="6.40.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1576238400">- Update to version 9.0.7
  + Fix crash with a stack trace if no current_smt is
    present (bsc#1158664)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1576238401">- Update to version 9.0.8
  + Properly handle IPv6 addresses in URLs</changelog>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
</package>
<package pkgid="47012ac1053ee6960a82bb81c5c55827a58ad0809d95d507a48633d613b04e3f" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0c8714ea0c53d111b930ca76ff654f791143687ee141511c13141d8139209a49" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="a16108eed368cdb554388f97b9b51d0dcef71e20df673505752571a2d66b7128" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="2263c89c7ac15a108d5fa430285671003e214b2fbe4e328cf5f6f63d0fcd6ab4" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="442ead77ed15b3e9b9364a82334d0b4cf73530991bee13f2ba1005387baac0ca" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="58e132af23708c3971acde17cee525e5b11cad14744b50997641340091a5d5ff" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="7396bfcaf25e30d1a3264c569ef7cdbf502de13d70d7e2fa046a7583f1ec0d2f" name="corosync" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="91e7f80c7b6126bdb63988ad7c48b68b98315c4196469d6942b854e7902d7a3b" name="corosync" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="868249ef1f31dadf47518de8173ec238e305c29f66703edaef403b0dc9722c5d" name="corosync" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="8492fd9d99b846fc9f05cca97eccea7c14dbb6511532a23a3bc84e408b3b21bb" name="corosync" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="b42570eada086acf29d22b373bd086a460b96e36ff61d4e488f979f3cc8cfe08" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="7641ce57a5e90b992bbfb2503ab93d56a6009ed5dc6c6be8278b515d075171bb" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="26c7b27d4f5331e0e97bedca9c1286302a4b897ce758ca575c2eb83ea9e7ba2a" name="corosync-qdevice" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="92b22c5b1296e1f13665fff92a5343f2d024798dae7fdce0076ce546b99422da" name="corosync-qdevice" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="2e90bceb5b906e7d95b0467af37d305d1bf9391b655ab80cefe2b3b143b46745" name="corosync-qdevice" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="0835a24462f691e702a43a1b1c4b4aa2da6b237660412630e7d54c270450bd62" name="corosync-qdevice" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="7fc8576dca674398f84996f6c5d48923b0e0cc9cec0934e2169deb5d7cf0519b" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="a087a6a433a6967fdef81d814d2f568645e7bfb8ce65bf1bbf1ada87f42ab2d3" name="corosync-qnetd" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="223cab4beb9012b958f0df95f3439f002d55bec39ab78b02000e0b939f95cdc0" name="corosync-qnetd" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="4f977a99d7ff298c577bdc09f1d03cf6ee8a8abf4f54b59603c6ca141cdc84d3" name="corosync-qnetd" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="c5ad1fa0fd2f2973814c2a190efb1dc012c6adc0cd425e1f22a38c404fdc73d3" name="corosync-qnetd" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="1cbe782f098ec4b375df713cfed212770d69a17c982e1ef70cc5e212637a7e91" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="977f6a474e880cf94074882de3fd938d6163aa423604ca3e70bb3e35fa3ed00c" name="corosync-testagents" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f118c90fa1701031a88233984217933220834e4d48ed25de868588a2a3870d85" name="corosync-testagents" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="fd251962f09f5c1e65ad60965c35d23fe19f1f9721255b0bff970c12e412cc8f" name="corosync-testagents" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="880e4a97270d73c72b257ac53604f544c592b708094e6f06fa6b3af06b8dfebc" name="corosync-testagents" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="4f848d25975c3dc784902cd2e4540bacb87d2746d41afc482bf32a49873bfefb" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="2c2040b9b1d5ff07f2309e1a990a17d2af011604f9f22dcb22a81b239e0abf3e" name="cpp10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a16e486d6a504164f7f81a2fe97aeaeb683ebdd2562bbe2df8bfe612445b27f9" name="cpp10" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fed94bd534403a6a42cc5cf38a0a9ed4272a928a62efe6799ea61f5d28c114d6" name="cpp10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="61ddb39cd506ddfadfb0e40dedea8ce0ad130e5488d71a4377908fc55df6f1fa" name="cpp10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5b0b72bebe18792e1aa988ae81489f3ed23843696cfa6b0fe85aef804ea362cb" name="cpp10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="92e00826053ca1c2abd6530c956a440a9c59e9bbfd133ad4c9fd6d816a55e307" name="crash" arch="aarch64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="6302b1f35b40b4a43603e74a12af852710acf8bcaa57e81b598d338ff9c80243" name="crash" arch="i586">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="c4244d6cca0174384a2d0a838c97e432b4551278385465d24797c978dc0f29f3" name="crash" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="dc929f24d9ce6049c3467bc7ae1f35598b0c069c8c9b6053d26811afb16963be" name="crash" arch="s390x">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="a50c5191acf3445b4fe000eed9f78e374acddccce484a5971b93baa183c9e079" name="crash" arch="src">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="e850bf414bc14e7d46ae9d3c654b7e4422f3e51bd0859bac8d41942864a0b503" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="ac88d27b68f2a6b9fec4a5d56808902ccf4a5e4a029316f10b7284748951b197" name="crash-devel" arch="aarch64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="a035533317dc30236322181199eaf4e732ba262dbaa9d903950878682ef065bd" name="crash-devel" arch="i586">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="64c4b592af1c56e24e5bdf6c2d43fd32e4c2f1ec444f3d00b6d6e92de08584de" name="crash-devel" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="79a17d4cedd0c99bea2c21d800cff1e1d59c8e5f3db0e96855c7b11a0acb0771" name="crash-devel" arch="s390x">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="8fbbdac4cb193ec25e23810e6ac911da14bbc25c7a6ef07526196b4afe665f56" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="200f90f732bbb1a9026b211de004e2c798b46b452fae8608918008cee0800d6e" name="crash-doc" arch="aarch64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="266318e55b9b540d5c5a5af062d5ef005a41ee0e64d76bcadfae78a242347ce0" name="crash-doc" arch="i586">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="61ae355e57f01192b5f1ad8e5cbdf8b11f729084681fd839fa557362547f98a3" name="crash-doc" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="aa8c0c1863078e612ca57c974c8d0b663e7e59098a8a6284ec49b4125696f703" name="crash-doc" arch="s390x">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="3223b5bfe5c2cf9052a61f7a9add87e3847decd3b42b4846c0f8b39b2376ca92" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="6eaab3e658c4cb76ac1b3e1ac5a96022c80635944f7b2e8d7a9ba36214551ebe" name="crash-eppic" arch="aarch64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="f330c065b7d65ecb2a3fe6464eb68af49cacc3bd696259c4dd8181a7fcb3ac38" name="crash-eppic" arch="i586">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="5d4a5cee446c968820d8f7a594a213912b006cb20dc782a5fd8845eec94cce79" name="crash-eppic" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="265fad86082e91686943cc0bbe67f846873edf5b27e85232a8813b367fac84bc" name="crash-eppic" arch="s390x">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="6de8750cd7f3014f9950ec231cc7226089f2138073bb6c1c0ceb4c9ca44c17ec" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="da95f53dace5b798931b3cef41ed4acfa9cfc2d68020bcffe3f7f44055f5117b" name="crash-gcore" arch="i586">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="f87a373e5691676a6dff3a6d8617c3ee9cefe00df6e6fe7caff7a5f3787b3e15" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="75c6c2e3b943af5e1dfb0006c47d0070a5e4799cf150707ab97f2869f4b85fc7" name="crash-kmp-default" arch="aarch64">
  <version epoch="0" ver="7.2.1_k4.12.14_150.58" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="f55552b6098ef60c8e25810d347ce2d9e01d6bfe21c11c3acce6f628ca2cec5b" name="crash-kmp-default" arch="ppc64le">
  <version epoch="0" ver="7.2.1_k4.12.14_150.58" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="0d9b2425ba1bb48633315bfca1364041a6e8f8b62821b3127ba9538776ae417f" name="crash-kmp-default" arch="s390x">
  <version epoch="0" ver="7.2.1_k4.12.14_150.58" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="f38313404afb014eead21415387617975a6a009240ebea38de4124534d6c82e4" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_150.58" rel="3.13.1"/>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="163662413789a2b7ac84d8b15b9b14f00991b060eff4e1f7675243ffe6850d2c" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="3.44.1"/>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="48361af907b0715b36cb7c9d9572f7b8fd152ec65681e356415b86f32dddcfd5" name="crmsh" arch="src">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="3.44.1"/>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="15fcde74dbfdf0dd5eb063df96085318b35efda765e2bb43132d8e7134f62f0c" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="3.47.2"/>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="378aaa6a15cb1464f0c898b8bc55332d6b56e5d6da7c52f646136883b29a0482" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="3.47.2"/>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="8276212cd5f093ca8718b48ec625753d7da6c9ea4a1880321d54d15eea34aee3" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="d5715f5a196cfa6ffc237fba8d47559672dde6bde49a65954ccbf69fe1215ca8" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="3c610ec978fe8e96c4bc37c0be54607d63b2ed334f58ec04ee0c7a5cfef7da1d" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="9e0cf2925ef2b80e6bbccb939c33993311cda243fbc1629adb001a1d1bf28d12" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="e8e7f75e6e6c1d36fb9b25c7af90eb71e8507e3c89309041ad2c148c1d49f514" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="3.44.1"/>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="83893a949b39a2d7a147572d2c78e732fbee27a101f5d220bedbd3883e2013f4" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="3.47.2"/>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="aef2a8f6a4820e9e16a491f261ed61ca0dd797061628a224b6b8c41128206b93" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="c947c9a0461630667961f2aca8a64cc1c67845c3d53301a7d4ee5c0b35e4afb4" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="6fbb6b6bc8594a86ed79885dd0b632bf207a7714f3c8cb78918588e41dce887f" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.1.0+git.1602227275.3d680577" rel="3.44.1"/>
  <changelog author="XLiang@suse.com" date="1577966400">- Update to version 4.1.0+git.1577154653.8af8c12e:
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="54cfb2ae5bbbe8a86886bfa93ae8337af7b7ba6f96037cf50c07254d92853aad" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="3.47.2"/>
  <changelog author="XLiang@suse.com" date="1578484800">- Update to version 4.1.0+git.1578469492.493d5d62:
  * Feature: bootstrap: Maximum number of SBD device is 3
  * Feature: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code
  * Feature: bootstrap: support multi disk sbd configure
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1582027200">- Update to version 4.1.0+git.1581993582.18a6b810:
  * Low: corosync: check whether local ip has already configured
  * Low: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Medium: bootstrap: check whether init node is online while joining
  * Medium: bootstrap: for udpu, don't check join node's ip was in the same network
  * Low: utils: update detect_cloud pattern for aws
  * Feature: configure: make configure.set to update operation
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)
  * Low: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1585915200">- Update to version 4.1.0+git.1585823743.3acb5567:
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
  * Low: ui_context: give warning if using alias command
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1593518400">- Add patch:
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.1.0+git.1594697133.dcecb3ec:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, jsc#ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
- Remove patch:
  * 0001-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.1.0+git.1598258232.7580dd00:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.1.0+git.1599639106.b8652332:
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
</package>
<package pkgid="fd261e49de2078355eccc57ea2ce28aa1fabdd940bb53bacfaa4e6c8d7b0e1fa" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="0afa82b21f1709585d377d832519d2d3a2b56050b0f1f4b6ff4b580ceac2de8e" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="d86e2fbc796ade4bd7c166703c88b38324b7cb61b521279ccc40e91b285d03f5" name="cross-aarch64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d8cd6fb09c0433a4f73c9473ff84c10afcf25006a5d8dc45607376dc65bd05b8" name="cross-aarch64-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6cc7f4237720de6d3bdcad12f1ecd8fa5ebc900dd3882de9b60036062c56a1a2" name="cross-aarch64-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="39b9b34d0b24207e61cce0c5f083fdff4226e4be22a66319fe74ed848da245a8" name="cross-aarch64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b2fa1fabdf628f1274168501abb32eb791ece8bd01119efe815691d33ceb1624" name="cross-aarch64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8b87bfd19ff5d7e323c6b799ccf290edeed7dae32d3a948febb94e37efe8ea1a" name="cross-aarch64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1efb33136a77cf976be8852e715fbdd50bb278702ada6c603f1428cb4500cf67" name="cross-aarch64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2029bbfec1592a2e4e74a0b322232a5159fecb301b6c7177bc3d5385eadd7ab5" name="cross-arm-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="18b7149373bb7b359dd6f82c2e794814d6eb066e29344eb42269b0f77cdddb9e" name="cross-arm-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c30d4e504ce80b92e442bad6bcaea55f4e3e6b1882275c86908f3546b682326e" name="cross-arm-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ad53296c3a44989eda7b77e599245f3efbfb6a6c44773f33dc58f2cc0686f0c1" name="cross-arm-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="e80ce1a9058793665f4e550144b72dd056ac6eeb3c94ce21d002007554d0dc59" name="cross-arm-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="65b8f441496d914576394f4c1451da8483836e42bc376aec2f13474096f04b2c" name="cross-arm-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="62abc113c119090569d4de35a65997226219ee178e645f11c0dfd3e3e0f90ae3" name="cross-arm-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="16fc72f6ac2000f5247f9bd52c3990a5d0dace815f80482cbdf497cf3c34fd8d" name="cross-arm-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="cff453f54611350ca44e8570d9eb8e06ebf51cf61585fdd96ac6abad5987f5d9" name="cross-arm-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b95b5111c93177356f242c862414b90d8e096e783ff2b6371f56f1006dcb7b9f" name="cross-hppa-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="15b3856cd50aa17453345f6cd9733ca8f12a5d98634cac89679927ec6954ff66" name="cross-hppa-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="519a68306f013b8206b3c23031c942770af178893dfd1bee51969aa28cd28506" name="cross-hppa-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0c74e572a3892bdff0486d970cca7c5f60321a17a1e2654800fa03620166aed3" name="cross-hppa-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="aaf3ab2f51151ef4ce221f90180af469bf446064cabb589f512a50ee7bad2848" name="cross-hppa-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d4c9880d782751809242e5bbcb5d893c19187220d978b9950b3ca15ce21615d0" name="cross-hppa-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8fb9f79f337f9ea06c4502cf8e496025a9a5e02fb602fdcdd8792d1306ee9347" name="cross-hppa-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="02c77ae072dfa031a791817bc3e3eb23168c98d01ccfd3148ecb39a254006cce" name="cross-hppa-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ac99c2ad4051f1dd604712d23b104707f22d579ad3d2357f9521790115552d6d" name="cross-hppa-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8b6ac3c9cbed169f5efd40a339b9a661ae8b047c815b95a78bc5d7e418e74e6a" name="cross-i386-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="756be2243dec75f240b11df261da212c4e5460276efd499e9a0563f0b77e2ebf" name="cross-i386-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9d434a4c0e4623d1620b932977f2485be71d8e6a622196e472897e622b9390c2" name="cross-i386-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="21faa07535e21700dd829785510e095f62b94e462fb73391b4a330007628e0cb" name="cross-i386-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5b183db2aa450012af060dabddf051070665cbb0b84c1db16a6d7b46b6578215" name="cross-i386-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="288ef286cc71e7f269aaf09d68bc709f76d38745bd4136a189dd8c7cfd40db44" name="cross-i386-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d2a35a458ae323fb99f8f462350b939205ff881dcaa997736da5737004deece9" name="cross-i386-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c229f0261ddc3643d874677392f8c0fe6caaa1ad3cdcd7690c013922f9b67e10" name="cross-i386-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2b34c9b9e709446ae252316e9e13c8db7538a6b33c101bad2c30ea6c2c89852f" name="cross-i386-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7e3edcbb8fccb521a73fbe3b99a001e4aab89d1e48b77e805e780fab179edad8" name="cross-m68k-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="dd9f555ae9a17a609d03ad3b91a2ac61eb498d612688b772d36c2325d9384c8b" name="cross-m68k-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1ff48895c4934cad950a5ddb41fe95bfe91a1267195cd575b904bd9e5a5f3a7b" name="cross-m68k-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="babc7c89cd5df652d06e1c6e9de94f6185c4926ebb765687217eacc2c796d587" name="cross-m68k-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0399b9fd4a7441e5652b79f8cb18addcae4490fa02e100a5815c341bcc5cf2ef" name="cross-m68k-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="22352df119b7b0a9f49a01b62c7f97daf6ae56689343793b1ef475c1ab477112" name="cross-m68k-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8fc879f9cd55eef16abdb299eed18098d9cb2d3d640416b8726ab32ace32fd14" name="cross-m68k-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7aeeb10a30b58216876e74544a90eb1b8e828207398e5be55edfc059d3e73e80" name="cross-m68k-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="cf53b09f67be6c7e74caf893540159f12fdce9b36b786585f13ed6e1b9cc62e6" name="cross-m68k-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5f5aa8a6e0e3a9d64b6b0b8ccaca38958c7278f7b9fa5c84819e01a0ee3424a1" name="cross-mips-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="13dd4cc9d190e5723e646a80d7d1eb7c45989e6774826382f78e4f9ce8cbd1df" name="cross-mips-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0281d7a5648d885427513ef51fdc8cbc74301cce0892453176d9b992a995081c" name="cross-mips-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8b63ac78d567860b68ef9806a41243558c12cf0180c538a4e9533d78403a6993" name="cross-mips-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="53ff29fbcb56243e299f6f91f9e2a11f2ce006fbce1c1ef2764925042934c3ba" name="cross-mips-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f3fd899c308df44778b39ce7515f33a737f89b41bb463c95d9159ae1e3eb43dc" name="cross-mips-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="584e5cd3e3cc36624d92a1e1cdc1b80a053ab1687a4abeb18c288ee94750bca0" name="cross-mips-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="aecbff39d0c416fbe60bd02c29679eb13399eeb99f983141fc6483e533ebe94a" name="cross-mips-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a46a6961c80d6c0b4009728a89549ce224d8c0f36c1d4d600d7f3b5b057e2ce4" name="cross-mips-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2ed0e06f466342dfef855503ca6b659244ca6e95116e10c87bf30ccee14693d4" name="cross-nvptx-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b7b807cb03eae5b5cc30484a35666d8470a1e89e365a3bea74ff015fc9eee596" name="cross-nvptx-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d3b06f2e85dec1e8dbe296cebdf00d3e3ffdb4dd19d05ecb715bb00e5154e860" name="cross-nvptx-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="e559a345ce1b519a4720a2fd8d94342b107fdc3be41e61ac673badb9f60f7f94" name="cross-nvptx-newlib10-devel" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="56e1fb87520b43e6410b8d478579399a6dd5059381f0116d663ba659c3386aeb" name="cross-nvptx-newlib10-devel" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b9d5458f14bc1a0ea33a0022248b3804161ce1f6c94ac1e2db30d6f27e5f9e6d" name="cross-ppc64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="94fdfd9df2f23fa17a66b5f00a247ce96710b598d39c4614cc533456aca45f6a" name="cross-ppc64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0210b87b86643b1fdfbcc6dda7a63d2cb2ffb1153e6f90f82d60d583ec229828" name="cross-ppc64-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="20ef4502fc1858db51cab419ecd432327a03cea51b7a006fe64dabca036f213c" name="cross-ppc64-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="e45ba53405438859d454c82196ae70887d47cc236594d4636904abf09a05fb06" name="cross-ppc64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c6bd2a63efb84e88490be77a02be3c26c94fdfa0862c910b47cb32bb87cd0e0d" name="cross-ppc64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b474a8d9a523254e2739dbd886e679b7e5e7711196b90a3556379b0854ff61ba" name="cross-ppc64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3be0d196c53baeb1be4a62aafadfb372ccfc43fcc376fcf0f030e87f3b3ef622" name="cross-ppc64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="076cd4495dfb24e1d650e75d328f35df582a0339b3c0562844a293fb94037ea0" name="cross-ppc64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="bde7fdbd70dafc9d68a705a53945846ec14345228866ae7c52152456b2eed29b" name="cross-ppc64le-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="22e8000811bde4e38e49954065f5cd530a00a5fc082c3ce93fb3b82ae563eeb0" name="cross-ppc64le-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="536a96efa4cd4810f3d0bd5ffddd9a25dde393d1031a1389f0ed35d349277816" name="cross-ppc64le-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fc8bb322aabf2afb83e51a1ecc6abf23eba1a247b359aafd878f93ace262d338" name="cross-ppc64le-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="07266395afb8f9a7dfeb7956f8891751958229322c988ba1fca826f7ce0993e1" name="cross-ppc64le-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="920631eb24b3a616feb8f855e3dc5405ef7626dfcf0d71adc1b9aeecf9ec5210" name="cross-ppc64le-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="358dad5c6ca5713bae6116a323f3249e5ea1664963852a04eee06172a994cc72" name="cross-ppc64le-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.2"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5829148ee99d61b25a7dd2943d3dfc9839a9dd0f9ff0be882675cfc9a2b788e0" name="cross-riscv64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="730a5bd13822ca26783b7a6a33b90437786c5a4142b6570019281c4fcc26234d" name="cross-riscv64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2485feba0f2c518a3a67133158e3eed8ee8911dfc7375174d8cab0602fb39e2b" name="cross-riscv64-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ed9d78bf24871a707c24fc10b52d1811dd9084ff438af0df474b9fec863b7a76" name="cross-riscv64-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f1b9e134fd28dfc52dabf11d860ec84d7a10228003c12e0b5e54c0aab7cb166c" name="cross-riscv64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a573214e7dfe565e78b45d5c6634d21304bb03a38a891e34e29158489ee65278" name="cross-riscv64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0d275f0e9d7459d0267f86eb9046a13c8ababe700bfab1f93604f97c2cf3ea35" name="cross-riscv64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="32d796544b4cbb86675daf7e95803693f833ac15fafda3e89eb7a1cc9cd3a4ae" name="cross-riscv64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9b8ca12ec1e1c4cf827bf1b75fd11e4f877872ba19ba5e9bf4d30acd409f0d51" name="cross-riscv64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ae95ba3589881f9acec9733b970c3ba9c8b8825d33aa17853063d240bb7f0f8a" name="cross-s390x-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a6bfc5383d9eb80569f5100ee297ea504af42dd31eb0abdc30c945ffa5042797" name="cross-s390x-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6ef0a24d47399b8344a7194f8d64fd3196b5cc0a77c37e5d254f8b1f41888664" name="cross-s390x-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d497a85f72c2bccd5a3b470d1b4e6a33cb50de5e49891c3a99fc08969bafc090" name="cross-s390x-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="496584ce1763911bb45d73e48497997c7e78aef1353f03b4ed7b7b622a125d37" name="cross-s390x-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="354010fc5986d97e4cde05b631af71d0e7ac0528fa393e1a7f842e49c5f2d4e0" name="cross-s390x-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5fb0cc3dce6a89a28a28935ffe6ae363590d65739083b472b83b5c037861db0f" name="cross-s390x-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a9ed9a44afd0fa15a96637eaf4692f2be0de2da8853f28abe61ae416d8000da2" name="cross-sparc-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3a165ad278dca9c355987070dec8730342415ff422e32515cee0a6c1460fbc6b" name="cross-sparc-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c1710d24504a1e12d6cbcf494a4e111ecf54653e849b41c104cce14aa9ea1945" name="cross-sparc-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="480d43121e8031dbfe38677249eee10ec1a1bea5245cc88781857f109313df48" name="cross-sparc-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9cf0e0586cf6473a44c2943360af6b7f3399d4d4540621912763fd33d72ee2c9" name="cross-sparc-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3affe8153ab6ef1a2ef9af2f25c9a3bf43b4265ded0cebac6ede8b3238dfe6d2" name="cross-sparc64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="527dab42e95ae7525bbcaf55cd2c2752c85a14e4ee0ca8197c27054cf9d07026" name="cross-sparc64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="04a7acbc225f8e31e45d01bcd974c017ab0e272344e18c8c285c965178cf6fad" name="cross-sparc64-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="07decf2c40cf56dd1f63e7255591e8afa7c4029901e4b7b4efbc81cb30644e4f" name="cross-sparc64-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9757f15021e9efce592d878bc53622f237bccb8d70e540e148f30c83b3fc8294" name="cross-sparc64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3b7bb08bcbb67158e502a1fec7464fa0a30b206c3ff638c0680d5252e2d21322" name="cross-sparc64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ac7a5637f5a709760f002fc6d89bb6b7fc261c60bf817556e368ffc737fd42b2" name="cross-sparc64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="03b09d9ca5a0edcad981cf1264b61402689132397ad75ec611ed63fd20006921" name="cross-sparc64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="dd0fd30f81e6dc75cfe2cdfd06a7d656d6c6d98f65ea794852bb8778dce92e07" name="cross-sparc64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fb282f77b046d8cb2e8dcc162a19dd2fb5e4b5342381ecb9aafe386fc662b919" name="cross-sparcv9-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7e96f5268971c904b0a8ce1057fb558b16b2c0a5056700791f36314416efaf4d" name="cross-sparcv9-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b04745d919ef5b12ff063246df20a21262bf941410b58f6679f2ffa5c01f2da4" name="cross-sparcv9-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f24b70d37cd11307aea5afe7d395ec2effdd10151a31c720674abc4de02ea9c8" name="cross-sparcv9-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a2238b4303ae546ac3c4aecc8474e1731a599d28e0ea8957ce2672f65c2fe524" name="cross-x86_64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="4eaaa82e09bc0e8efe3ca7b8e7ba01d4176c95042993029cdb7d9c99526a18b0" name="cross-x86_64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="61bf1e00754c906261f4cf0e1580a933172de6b4f137339b899ff298b227c5d0" name="cross-x86_64-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d49058fab46be717b7ce9033b92a8c9aa4fda915a41aae8b15bfa373085dedbd" name="cross-x86_64-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="224b401854310745d64de6d81e121bad8a8c360a6d0b008b2f61702346d95824" name="cross-x86_64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="125e0e5a55dd8930e329dc0240192e244489ad2fc5bee56ef505f1bfd81b2602" name="cross-x86_64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7cac59e2db1bebdc29e9d30aad2a6d9d4c49b766d3bdf453cad3ca216db741d9" name="cross-x86_64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.3"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2cbaf860d0a10228d069bd7211e5d3dacb1800d9f6ee8935a009adbd88c82b13" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fbd0250e86b4bc372d08da8fea83b0b79b5df90e7f6420c353ae99502a5f3619" name="ctdb" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="bddb29a5c0b275376a6f2cb796d1f8e63837ed4632ea46bd0a41082866379486" name="ctdb" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7a04c2840c1b8f9bcaf9de90903660e14555fda53e2547e8c6ee3436c1903be8" name="ctdb" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="12b7b2e8e83b98f0037db1f74b34ed649be5e5d381eb63ea74ff5c21e2d07ba1" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="bdaab70aee2124895259504d86c52a4316a7b6412c1f939592815d1834d00ee7" name="ctdb-pcp-pmda" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="61e97420d52bf4bee72c4732a1209ae9910d866b7e5c04754d8938532a44cdbd" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="239a51f2467ac38f5c211b2193c4513c3c1cca51c42412652b3e562161ab3979" name="ctdb-pcp-pmda" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="820e8da191c4c46c60bcb96a4cd29f9ed2149cda14dd0244fefb16262aeadec0" name="ctdb-pcp-pmda" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4a100c0a77aca5cead529ad9a2ee735be08142764ef17961f424b26e91f24c07" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="797717004c8e49c8ab040191789ac35a9f5e61ec9554a14a71add5a01e139743" name="ctdb-tests" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="892e035ea1e6e38c3bd717d85911975e63779e2a49230f86415ad7792cfc036a" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="98b19a33dd144fbfc98a5c26375faf4dfa17f5f60bd0f30568319ada6c604dbc" name="ctdb-tests" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2e3564d55f1583db35758006cb07af15a0b4d87e85a200aa4f62a8af3117a04a" name="ctdb-tests" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="582908a008d30bff7ab25f60e19fc42c8d23adef10dd844321df3378d6cb2095" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ba738422bd430f3c09af451a472d63c9eeccddca4166ba34451aab92eb43e65e" name="curl" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="fee121970bb8a4236579a82a4015f0be0ea0f34921e608683104673cb064b0dd" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="48eb01183876062d1fa5e7231a7039a05d811ac9eeb16e1292b79d95d0087cab" name="curl" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e44f0e34e27b6a4719270f13f5530c5ba9407286305b196df96650d2e605d10f" name="curl" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f4e648247ffdca268c936612165cccff050f5f9d3b7426b955447aa76153863b" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="843e1e8ff93f685250a1af87462584e6afbf66419cd11234faa858f63849dd88" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="5a689bdcdeba1e1e6b3c92da7f715aa4457cc6f6545bfacc1985460c3dbdebf8" name="curl-mini" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="5956b4603cfcc0753f77db1a8a953011c02a720f3677d1162b9167b7c1d1f95a" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ab56994d1e97b136de66b780a9af4c45a4ec9a48ab18637e0477fb9d535aac7d" name="curl-mini" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7751003ed068c738777ccb85703899e8b226afc0986d73b38e1808ed14147257" name="curl-mini" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e9afba60ea3e0696171c7a633977cdee39b5cb65fcfd7c9b1c2dfc5000f301a9" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f83abdf0c11d4a29894f21013f7eb9169a8ef3bc4f69161f3a7a325ce7a1fcc1" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="98175a0e4cf4651737d5d45e692d48e1b86b796689bd2e5bb74458bfeae11960" name="dash" arch="aarch64">
  <version epoch="0" ver="0.5.11.2" rel="3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="59040cb7090e0713df7c11045b526a775b121428db2f34d0e48583db010fdeaf" name="dash" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="39e95ebef809678efa00ba518d366680b7a6923a81a357d0eda5244bff4f490e" name="dash" arch="ppc64le">
  <version epoch="0" ver="0.5.11.2" rel="3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="19f66344b2078967db3418595b32bd9fe262be4c3445a2fb664f6feb9a0b1184" name="dash" arch="s390x">
  <version epoch="0" ver="0.5.11.2" rel="3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="5f9cdb14f5d1d7a5146c0303eb60046c5e9803b9ee4579241185b1b0125bc397" name="dash" arch="src">
  <version epoch="0" ver="0.5.11.2" rel="3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="a506bf294c4d9999f0c8ba7f9c2515ed66b42589525305ae435cfac31854abcf" name="dash" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="3.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="dmueller@suse.com" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="7cda3b705250488a8f30dfe24a38b5cf2470931de87449c0c69033e2d0c4f757" name="dbxtool" arch="aarch64">
  <version epoch="0" ver="8" rel="1.3.1"/>
  <changelog author="meissner@suse.com" date="1588939200">- import dbxtool, for handling and storing the UEFI DBX database.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 8:
  * Make a "make coverity" rule to scan the source
  * Don't try to apply anything if PK and KEK aren't enrolled
  * Add --force and --quiet for the PK/KEK checker, and use them in the
  systemd service.
  * Add a .syntastic_c_config for vim's Syntastic modules
  * Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  * Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  * Lots of minor bug fixes gcc -Wextra and friends found.</changelog>
  <changelog author="meissner@suse.com" date="1600776000">- dbxtool-fixes.patch: bigger hammer for integer size mismatch to
  fix build on more architectures.</changelog>
  <changelog author="meissner@suse.com" date="1602676800">- adjustment for SLE build, include in SLE11, SLE12 and SLE15
  jsc#ECO-2560 jsc#PM-2042 jsc#SLE-16062</changelog>
</package>
<package pkgid="89a85190a3f4d7618577224a8151cc052d7f31143b9253711fe44aaec3364ac3" name="dbxtool" arch="i586">
  <version epoch="0" ver="8" rel="1.3.1"/>
  <changelog author="meissner@suse.com" date="1588939200">- import dbxtool, for handling and storing the UEFI DBX database.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 8:
  * Make a "make coverity" rule to scan the source
  * Don't try to apply anything if PK and KEK aren't enrolled
  * Add --force and --quiet for the PK/KEK checker, and use them in the
  systemd service.
  * Add a .syntastic_c_config for vim's Syntastic modules
  * Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  * Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  * Lots of minor bug fixes gcc -Wextra and friends found.</changelog>
  <changelog author="meissner@suse.com" date="1600776000">- dbxtool-fixes.patch: bigger hammer for integer size mismatch to
  fix build on more architectures.</changelog>
  <changelog author="meissner@suse.com" date="1602676800">- adjustment for SLE build, include in SLE11, SLE12 and SLE15
  jsc#ECO-2560 jsc#PM-2042 jsc#SLE-16062</changelog>
</package>
<package pkgid="919533f1e77e82d4fc74ae655887fb7b619e4059467c87562b721682a8ad32f3" name="dbxtool" arch="ppc64le">
  <version epoch="0" ver="8" rel="1.3.1"/>
  <changelog author="meissner@suse.com" date="1588939200">- import dbxtool, for handling and storing the UEFI DBX database.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 8:
  * Make a "make coverity" rule to scan the source
  * Don't try to apply anything if PK and KEK aren't enrolled
  * Add --force and --quiet for the PK/KEK checker, and use them in the
  systemd service.
  * Add a .syntastic_c_config for vim's Syntastic modules
  * Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  * Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  * Lots of minor bug fixes gcc -Wextra and friends found.</changelog>
  <changelog author="meissner@suse.com" date="1600776000">- dbxtool-fixes.patch: bigger hammer for integer size mismatch to
  fix build on more architectures.</changelog>
  <changelog author="meissner@suse.com" date="1602676800">- adjustment for SLE build, include in SLE11, SLE12 and SLE15
  jsc#ECO-2560 jsc#PM-2042 jsc#SLE-16062</changelog>
</package>
<package pkgid="60eb10f300457a6c4fccd17f719a4d2b117bc19a32a134ae6537e640969b13cf" name="dbxtool" arch="s390x">
  <version epoch="0" ver="8" rel="1.3.1"/>
  <changelog author="meissner@suse.com" date="1588939200">- import dbxtool, for handling and storing the UEFI DBX database.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 8:
  * Make a "make coverity" rule to scan the source
  * Don't try to apply anything if PK and KEK aren't enrolled
  * Add --force and --quiet for the PK/KEK checker, and use them in the
  systemd service.
  * Add a .syntastic_c_config for vim's Syntastic modules
  * Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  * Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  * Lots of minor bug fixes gcc -Wextra and friends found.</changelog>
  <changelog author="meissner@suse.com" date="1600776000">- dbxtool-fixes.patch: bigger hammer for integer size mismatch to
  fix build on more architectures.</changelog>
  <changelog author="meissner@suse.com" date="1602676800">- adjustment for SLE build, include in SLE11, SLE12 and SLE15
  jsc#ECO-2560 jsc#PM-2042 jsc#SLE-16062</changelog>
</package>
<package pkgid="47b6a9d71a1ec0099a0f24459a11d799cfb21756168bc655b96b15e3e3fa9d71" name="dbxtool" arch="src">
  <version epoch="0" ver="8" rel="1.3.1"/>
  <changelog author="meissner@suse.com" date="1588939200">- import dbxtool, for handling and storing the UEFI DBX database.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 8:
  * Make a "make coverity" rule to scan the source
  * Don't try to apply anything if PK and KEK aren't enrolled
  * Add --force and --quiet for the PK/KEK checker, and use them in the
  systemd service.
  * Add a .syntastic_c_config for vim's Syntastic modules
  * Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  * Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  * Lots of minor bug fixes gcc -Wextra and friends found.</changelog>
  <changelog author="meissner@suse.com" date="1600776000">- dbxtool-fixes.patch: bigger hammer for integer size mismatch to
  fix build on more architectures.</changelog>
  <changelog author="meissner@suse.com" date="1602676800">- adjustment for SLE build, include in SLE11, SLE12 and SLE15
  jsc#ECO-2560 jsc#PM-2042 jsc#SLE-16062</changelog>
</package>
<package pkgid="99338a248bcd4df1bad2e82db9c0b0749258880edc32b298b6d73eb8d8a1e3ac" name="dbxtool" arch="x86_64">
  <version epoch="0" ver="8" rel="1.3.1"/>
  <changelog author="meissner@suse.com" date="1588939200">- import dbxtool, for handling and storing the UEFI DBX database.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 8:
  * Make a "make coverity" rule to scan the source
  * Don't try to apply anything if PK and KEK aren't enrolled
  * Add --force and --quiet for the PK/KEK checker, and use them in the
  systemd service.
  * Add a .syntastic_c_config for vim's Syntastic modules
  * Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  * Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  * Lots of minor bug fixes gcc -Wextra and friends found.</changelog>
  <changelog author="meissner@suse.com" date="1600776000">- dbxtool-fixes.patch: bigger hammer for integer size mismatch to
  fix build on more architectures.</changelog>
  <changelog author="meissner@suse.com" date="1602676800">- adjustment for SLE build, include in SLE11, SLE12 and SLE15
  jsc#ECO-2560 jsc#PM-2042 jsc#SLE-16062</changelog>
</package>
<package pkgid="e882616e9c71030734d5298b0436cb9b95e738b0c6532441b50a35079180cf0b" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="833b3a9a30ea79203a450745fd0316a389dd4a448297805b6cf55df1ef1b0780" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="2863f1f8f70afaaa2d2dc2bb32c4448b10bf633a02e7b55d2db8219d8e3cde07" name="djvulibre" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="6b7fc49e0894237faf0a131d5aa94e74c8a1de72dd879a16959ee871ad6a68a5" name="djvulibre" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="c34f3d5011000b9f7f669a3461798419ec4f8805a15d3e704cd305f8e941c383" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="dc0e673d7575e1d682fce9b2ed3790fe83f839bb9e8c39345a1d3a1417aab596" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="51eaa038ee42c6eeab7bdb84ccf249b32c67b70c8e490e052b63b251b264833d" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="dddea8620a72550c52e1a3b339d708b2394252de0a9a157ac076638266ea76f5" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9ca644d75337f55df161edbe499c53d9e6645c2dc98e1c6a2de163a5530fc13c" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3a7b5bfe0391254d20fd9a78ed74dce8b0a473077d058bcc6714d15b9e1cd9ea" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="c380fbc023b8047f082773eff4d6c909a8206f4de1b949009a344d0391d68c62" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="05661f171a8b91d10b38f5f583c0b0cb4cb64ec113f1973b398f7cb30a03e0e7" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="7baafb665f51c082d631e922022db7eec8da6b3241a1a2606c1be4df26a55d77" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="3725b8267fa6692442172fde29f3d390b12144f3596a79387163b40914c6ec1f" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="ed10c2d4da79ed7fb0e231374455cf0c40f7acdbd6d7fea7fdeb438e8e36774a" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b752e64cad7941c0d10f229b98b67fc0fad9ba81e35afcf1004912594b76362b" name="dracut-kiwi-lib" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="0dfb21df8e9dcc72d69309f2fbaa855e536d037e17e582e710a81c7a1182f0db" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="cf3b38573fbfa2de4f231afe46f7ad1498d4d2bde7876556c79f9673faaf9a92" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="3649f5d8a8b27e618bbace48ab77e9d72e0e34da6cb4c12be97251efb28a296f" name="dracut-kiwi-live" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="faa682120953403b54fd4194ae76b88e600fba862bd4877e03726a191db651d2" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2dab1daf0989c3c3313021edb1c3d231a14bf6a057b6a6f90c76e3d0534119bc" name="dracut-kiwi-live" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e3a112e7902e5f54bbc313c074cb355265d6f509b78e3f0509bab11257140861" name="dracut-kiwi-live" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5992b938ca7d86c6fb467e7aeddb477790d3dedc6640a5c2f10c2dda20df8e94" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="72f5c03e5b018ca20af7d0055d979a8b1308a69786dd603f1f49dcd808d2ab87" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="3aa4c38acdbd973a978b9c34295f1d71eba2852ffc9cc7212f0a55eb926d97c7" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="44e3c25539b9d0373da7e37a444c036064f4531a0dde5a354765da24c165e778" name="dracut-kiwi-oem-dump" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="345f091d90490716df3f3d44dcbb297f6202a35f895e6a1317cb089b846293d8" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="ac0329a686d117bc963777edaaac93d271d998995ee831a3d395ad1f1aa75c8d" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="38582fd48897fc49f4e6a6f5e7fb9c6f246316b40593f7d9965a8091f2287e47" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b9cd8f09665a598b84efdbcf8fab136ceec5ba95693d28b7e9e2e196011737e1" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e967ddb427fc8e84744918035f1dd49a1a5bf750bc6449c5631465982c6b3cae" name="dracut-kiwi-oem-repart" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="994294c911e5cfb24ad80fa902376004871bc7bf9f170364318425f03549aa98" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="129ad604b52c1e712cd5116a13521ad972fcd714979814827ef65f28b11869a6" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d7724568b5951537cc0fb7f5054197609f1ffda9e532e22640134019302ebe2d" name="dracut-kiwi-overlay" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="9fd7cf9f78858e657013e9742e295d78196ec34511e52cfd0de46cf067e3181b" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b6f6462bb63856e58bb85b9c5036d40c9625c295533b7890284134d99b88bbce" name="dracut-kiwi-overlay" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d62c1aa0ed33553d4fc16a2b2a7a2e9aa9f58f99f101380a14c4af013939d466" name="dracut-kiwi-overlay" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="aa945e606d685d602127eaecaaa72bf10cf81778335447ad7064420f4847de2a" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="ee7fa79079389c48902d9c24b7caa9fa5dffd9df0020cd980f196a3c0d37d62e" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1602150122.f08af0a" rel="1.21.1"/>
  <changelog author="oholecek@suse.com" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="nadvornik@suse.com" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="nadvornik@suse.com" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="nadvornik@suse.com" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="oholecek@suse.com" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="nadvornik@suse.com" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="nadvornik@suse.com" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="nadvornik@suse.com" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
</package>
<package pkgid="43a61295bd234859185b6ab48c76788f32e5818e9a9627dcb87dd6f6f0930f31" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1602150122.f08af0a" rel="1.21.1"/>
  <changelog author="oholecek@suse.com" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="nadvornik@suse.com" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="nadvornik@suse.com" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="nadvornik@suse.com" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="oholecek@suse.com" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="nadvornik@suse.com" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="nadvornik@suse.com" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="nadvornik@suse.com" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
</package>
<package pkgid="afe25ac056ba6e5e371d3674d7bc8b20ebcaf43cdf077699745699cc77a68662" name="drbd-formula" arch="noarch">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="3.6.1"/>
  <changelog author="nwang@suse.com" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="xarbulu@suse.com" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="xarbulu@suse.com" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="xarbulu@suse.com" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="xarbulu@suse.com" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nwang@suse.com" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nwang@suse.com" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nwang@suse.com" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nwang@suse.com" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="9982558f78e659cf9a9a59638dfe88b9e51fb03432e1c935bf8578bf1efe0f0a" name="drbd-formula" arch="src">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="3.6.1"/>
  <changelog author="nwang@suse.com" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="xarbulu@suse.com" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="xarbulu@suse.com" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="xarbulu@suse.com" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="xarbulu@suse.com" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nwang@suse.com" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nwang@suse.com" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nwang@suse.com" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nwang@suse.com" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="4fa9ff438c33173c8c233b812e5d06e8bf5451e33024b6edcd528ee07ecd04b9" name="exfatprogs" arch="aarch64">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="1979dd4df65eae048caa665434c4616665892fc05ac2e607bd014298abf499c2" name="exfatprogs" arch="i586">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="c8cf2661a13fcee3e505c0e669281d76b7d659654512354a8e9c3c60a15fd38c" name="exfatprogs" arch="ppc64le">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="26e46da0abf131f47775b04f8cf9908695dee3a80566f86c6f32fa514a4abc7e" name="exfatprogs" arch="s390x">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="6dcd2aaa52f15f57af8cadb4b77554333d1b60d321469d351b9f0f0d8931f9f7" name="exfatprogs" arch="src">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="693069578958b6fc9ee2ebbccc9dcb1312cc0f95694c662cfc7a29d4a4e69709" name="exfatprogs" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="d841468097ccb7b0fe2b4effb27eaa219a98c9bcba07d8952d2d32de9700e852" name="file" arch="aarch64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="18ebe3edcaa7697b1ac7254f472eb0bdd5ddea380703b363bcab6412242ee7a0" name="file" arch="i586">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="08b9b3f5d6d5b645ec5e081d2cb3b0be766e1339d628ea5af70afc74bdc2aab1" name="file" arch="ppc64le">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="23fc95b58a2f8e93527199f2936ef14da9719ac63989fe591000c8c055fa605e" name="file" arch="s390x">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="9db49fef5aa3c86e2664455df1b88f604381bd4dd90fcd22936a615c49c4aedf" name="file" arch="src">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="d2fb38ccbf53c1dc54cd16bb5b9250c36be15e7bd0497dd44b5902f49661c839" name="file" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="28777053b5d8792452e9dcd6dba7ad4ae2cf91b6969d0ab81081eeffbc1c832e" name="file-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="bc6ab50e826f539664fa5ffdf94a95af73ead59226293face4d5828cba89ffcc" name="file-devel" arch="aarch64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="15e83b0750a498542fdec3278b1b0d0e549d2555c836e28cfd88539e0539829d" name="file-devel" arch="i586">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="726173d2e0324d4f3eb270230122bbe047cb4f466ba6597cea36026868bb3720" name="file-devel" arch="ppc64le">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="d412a0687f678b552d04bb4a0a54f72431ee30198ff8c5342d934a0f2f7508a3" name="file-devel" arch="s390x">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="c64b70a2aebb997211ebe4cc9fc77db6dbc0f8c48eca132fa74ace8b10796a60" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="aa859029e157440413ef9ab4f96536658d88565c655370befe1bf9f34529336b" name="file-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="e88ddcebed2b2d2447968eaf8a08589639c8a6fafb1e965feaf2235367970b61" name="file-magic" arch="noarch">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="405e9cc88c2f8d5e01dedca9bebf639b89ad38bcd8996e3740d2402e7d41af9e" name="findutils" arch="aarch64">
  <version epoch="0" ver="4.6.0" rel="4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="7977bd87ef5abf442130978930e75c3a05f0e293e9482e741a2d7bf250055b79" name="findutils" arch="i586">
  <version epoch="0" ver="4.6.0" rel="4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="a0bc11c88f3b9969f55d092c519e50620b8c9e37372ef6bae3aa1e90b79fef9c" name="findutils" arch="ppc64le">
  <version epoch="0" ver="4.6.0" rel="4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="564ae18ac977818ddbb346ad29700758ae2f2fc00dc03466d841b8eab2a2490c" name="findutils" arch="s390x">
  <version epoch="0" ver="4.6.0" rel="4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="903faa7b18ae28379013b66f7d364ac457bccba5e1ed0aec4fd9049328605651" name="findutils" arch="src">
  <version epoch="0" ver="4.6.0" rel="4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="6dc6ed01b31cbc5cb15b5817162b3299d4876f05eea4dd24499d62560b4049d6" name="findutils" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="4c99ef1ff6fbe9efd1363bcbf831426e5548616e2a769e6f614ed70ac9fde18e" name="findutils-lang" arch="noarch">
  <version epoch="0" ver="4.6.0" rel="4.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="7f5e7eb95d1c030e8e2f5ad5508fa91ce6cc06dd65c7cd808e8571522ba40bba" name="freetype2" arch="src">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="58fddd9b65f6d13ee9b673d266876b53d23f5e7a2c0297d45bba01016f9bd744" name="freetype2-devel" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="efa9d2b576aacf2cbd2982c9349dcb16aa62ffe40dea489a42b3c0c3f031b404" name="freetype2-devel" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="355eec0f12fe7f34dcf8b6403c46626d15aae2b766bf70f0a2c90e4d62d386c0" name="freetype2-devel" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="1a460f0f02f9053cab16ad2b55b67a69034e153594196b33c5bce460a9c200d8" name="freetype2-devel" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="926d5bfa98ae66be1b9d3beb06690ef5f41a6b2819fa3d922abe4d39a1f38d19" name="freetype2-devel" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="0557e517f53c5d113fdc7c8e0d184dd540000b2fb4c4a03a477f2f9882cb9230" name="freetype2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="5c1560cc43b626aa3bdbbec58794e3b1ae0341f325f2f0905f92de68516c1ece" name="freetype2-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="c52c8a8ed9bea1848e0be44e23a22ad470e50440bfe20df0cc2b4c75f6267ad6" name="freetype2-profile-tti35" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="a6ea09b4b832ab5842bf21a752bcf1bf7e7c4dbf8cd905b10bd1de18e65816d3" name="fribidi" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="f6b13728d81090e51a4c3400acec57155290a837373e70a488d71c7be5b81681" name="fribidi" arch="i586">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="67f7ac3de54a501d3688652700ea618a2843418ed4490bcb8c66f3ee480e905f" name="fribidi" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="3ff55d6a4f1269401c99adb8f162b232f8c6b68527c7cd2a9b46f4e93ca9005a" name="fribidi" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="ff11ff5d17734677b94a195b18d82069400d452904ffa2d70533fc55bd5de253" name="fribidi" arch="src">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="b3e5f2b3a4b5274615a1c21ea6b61cbc1c1d14bdc3b8496b9f0c0c52d2f9e1bb" name="fribidi" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="6ceb236da911c3701f29adf63c5064b69cd06dc9654e1afed8ec0fb0125c7ea9" name="fribidi-devel" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="02ca769f32343e4e72adad9bd44db16c56e7d58f718bd5cc8406754b77a8b928" name="fribidi-devel" arch="i586">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="3ad8f6dce775a654546ecf9931ef0a73704dd3d00686ed5c60f31c71807f0c27" name="fribidi-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="d4a92fdff7aa0dfebb951d6ff81590e7c96994964175e491794521cd6b394d4d" name="fribidi-devel" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="2e1817cd4cd7762c33a308aabb788579bd215a5d437b5d252609c6add551d48b" name="fribidi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="6c73a013ac1390c6d880e15d5e0a3c5e66bb6e1c6875fb3147f67692acae3205" name="ft2demos" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="cdd61fcc83872fb6ce27f1d7483dff5f495934576775761b806ca01c4852ed7c" name="ft2demos" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="7c84586ec71194c6f6f40d59385b7970e3d6615ce5cdcc73ef8dc206ea112c68" name="ft2demos" arch="src">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="e7c36f2d6a0edf896b32fdd53ff85fc96dd6d06c5a0ac0ae3312fc5e6e29608b" name="ft2demos" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="08ff86400287a69601dfa6478cf78a9d91e6298ee1fe631133a380e972e23999" name="ft2demos" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="8405acb0b008badaf5b6cde7576541986533bcb6328eaf19e1a64bc331f7e0be" name="ft2demos" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="e1f0dedcaddec134d8181d7093004be9c83d93b2ba535e8a5acccea7a470d329" name="ftbench" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="ec677bc960ed28478f6195d05ac52ba754ade8988dae771ffb791d34d1b9dd21" name="ftbench" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="4d42d4ba7a9a9b58308fc39bfc87dbb659f8a6bfdd30f203d20577fb0995f6a9" name="ftbench" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="b1f81204a60ea3490891226ea2d620a28a435898adc33bedf6bafd5841cb5c34" name="ftbench" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="b69c9a370a3925b253db3464908284bce5d56f053b6710bdf2c63ea4d554cdc3" name="ftbench" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="0b56165d21ed173b178cab35d5a8740a6d81315e5757f930cb06dc177242dad6" name="ftdiff" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="913d536194de6f535335e2ba3491bafd304da41313aadc222d0df62ef092b39f" name="ftdiff" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="c428ed3c4c6fe42d526bfabf41ccd17841b1d7eb6bdc7e10831e31fd1ba31de3" name="ftdiff" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="e7a6b10815ffd792c4a995d65bed7efc800083fb0e6bc2d67f02f27fc1df1113" name="ftdiff" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="b99c21abdbd8fbd67bd3e7087ad0ac116ef83e0804a11e93e44a42b6f9013a2a" name="ftdiff" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="ec328f1f8e974d9516bda961cfb82dc54c8b3e6d34051d40efffe42fd361c116" name="ftdump" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="cf1522580a4106e662387c7b062281a3d2d9463b7a1eb0757afad3688e12acb4" name="ftdump" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="26ee9024a74d63c357e12efa4ab5fd7f75a401dd926cbe6ea80afa43cbe59cfd" name="ftdump" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="049c99d7df0f87fce978593d3d808623bb78059f6fcd42ef82636c7d8e949b3e" name="ftdump" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="900461bf4899835d46cbe837b8c5607b36f4f2333bfe96d2ffae35d92dd08415" name="ftdump" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="09194d6a9c8a15bcd6ca2607a46c56b1b180b41c6fb6f3c5fa773670ffa0913e" name="ftgamma" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="266c252d34c294e3636a0f1a2e52c27090da849879aa1791cc1744d0c9b0d7ea" name="ftgamma" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="0e0165c33f14067277f151a32bd1c59cf0c12b597c0c35bf0886ed167d4a16d4" name="ftgamma" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="2b4da8529c975c9525b4b29d66a41e4b223d532d13b26d39baa0acc7a257dca2" name="ftgamma" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="01ca840d0c34d7f8727a9b76bcb58316faa83435db333ef9ceef92bb4eb7e99a" name="ftgamma" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="14eaa003399a968e281e8ab27b33574b1bd26609cdd8e02ce2bf2a535aaeb5c0" name="ftgrid" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="ebaa5888fa83e317232569906149f54173356920005881edf7001d37a4ae6cfb" name="ftgrid" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="70f529ea993bddbb447cb2ac2c1435eaa6303f080aee0018d9b7de6dd98ad679" name="ftgrid" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="317844137420cf67d0b7500984ffda5c1e2e934963925f3b207b497dc06e6f32" name="ftgrid" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="3a5bc8ffbde514eee0c9f8b31ae261d7722468d7f82d4284e759776ad30aa5b0" name="ftgrid" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="dbc1089843490b51c3a4758b9ad566addd14af4e0e83e2999ad76229f59bc4eb" name="ftinspect" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="ccf11310b95cd6a99d50fc46d4105f1603b8f739512d4d6f44501875db87a180" name="ftinspect" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="1bbddbae5b913d9e1e8cc3893ac4cbf0715ccae6a6ba7ffbd5b6337f038f7c1a" name="ftinspect" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="4b51874168b995284c17d17fba4a02059e40880ccfdaf1bddeb0cb4ac0402d1c" name="ftinspect" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="e421c365b41ce0216601842b1237110c39ae8e2276f93c7fae8341a7ba5dcc21" name="ftinspect" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="297ee95b6a2346728d9fe81cdd57a329297516ef4d206f1b2b1af9ef71e1818c" name="ftlint" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="964024148d9054b8870badf3514d326e73550a0f6a0fae1cdd798bd9bdb47c8c" name="ftlint" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="7da5e9c7c89af58c87d80f815b8e9deac68dac7c4bb1221af399a1d6914fe71e" name="ftlint" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="e2d95f16574b4ed1dd23a818fb2ff371d4b88ae80b77e85af76b92662897d83d" name="ftlint" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="4ac714839441c0eeb1d69b1d2f791a204f63934117807ac584a2f8d8d79295d4" name="ftlint" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="8736e414e48584ac20f0a09c44bb3c16aa461c65b5a664f7282f8aff69d4f698" name="ftmulti" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="aa671b90a58e355207f5d783f38e215deac852251fbc934fe021e92831f81999" name="ftmulti" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="24887eb40400a4a6317d948a4a6819fb1b9794c332b512ac6e8e86cd7721b387" name="ftmulti" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="e23240d9fae41ce9fc7ea07113b547e5b823f39428d675f3f9b2fa642b2993ac" name="ftmulti" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="41167d8df7f1eead29e021b467f1e573b19d1a241f9ddb592e2c8d5031358897" name="ftmulti" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="b635352222dd2df7bfac38db30ea0ab1ad36285926800749732f9ac4180ff4e2" name="ftstring" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="fbcbe10ed702a1296fc041b8f56b8a264b6e8b1679f02f9e3a495855bf9d55d9" name="ftstring" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="df1eb1243d5ad61ac59d55ea3a22cbad5bfdd85e6c0a91ed93845722d50ad448" name="ftstring" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="7237288d2a4875b02d292f51c86ace1933116439cf8b2f6e1826c24d5e2bc7c4" name="ftstring" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="a8f138b6adb10b6b6a04546c0756a62c5d54903ddbfb782da2dc1f88b832020c" name="ftstring" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="9f3e1e3c05faa9a5a5ae2147fb3f9d303f15c0a4ae09fb1628d022d02bff2991" name="ftvalid" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="ba15b1ad090e4ac2c2482a662ff4798380d06ce2a9587242964fdc2a329afe3d" name="ftvalid" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="629fd08ba31f15acc8eef6f34b30547b203dcd54c77fcb45a5eb8fccd35800fc" name="ftvalid" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="d52fb512b04ec6e9ef007925ec8c60586ab6aa9dd15007492ff1a438a82d6abf" name="ftvalid" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="8e849ce3240b7354aafb10fc4af1528a00d16bda6c81b0d856fa46cf13c7f9d9" name="ftvalid" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="cd38e7db23985a29609caa3114e34d11987dba0056e0625bc6990106c9272148" name="ftview" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="b890c1b856c87896888e5007ce09da08505126be3797b113c7f867df326f12c6" name="ftview" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="fcbd3de62419b323bd431ccc794088137e549e4c2393aca59d45c4d74baccfd6" name="ftview" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="0a4d8d08b7da33ac9d108ab005316f587c14667bf16bda5d5326e58810a28e5e" name="ftview" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="2ae926a035e58eb8d94becb2c9263965cec2060ab2da1f1ee3a041ee2c03d179" name="ftview" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521201600">- Change xorg-x11-devel --&gt; pkgconfig(x11)</changelog>
  <changelog author="ecsos@opensuse.org" date="1521547200">- insert missing bzip2-devel for build in Leap 42.3</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * No changelog upstream.</changelog>
  <changelog author="i@marguerite.su" date="1549540800">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring</changelog>
</package>
<package pkgid="62f6670067978f632f8f3388fd96a7294f314622807003439a92415a7e8ddf09" name="gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5f3854299661005fabf9dd53bc7ee745d32f5f64ce442eafeb3046ed1ec7ae29" name="gcc10" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1b6e4e712eccd7f8eb840717f0788993cc42f569a45d76581447de44f480f387" name="gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b297c2a14815edcde175c23af8a52fe4e986319bf50297d8b7aa61306e203e5e" name="gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2858f5befe179e089b89d9dbb8be82140e72b043a4f2d258f9bfa6ce9277d34c" name="gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3f32e2e76e22e6f9729063fce52f8d63cf04728d4310a3518b01804f2f3ac33d" name="gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="18ad40be16838163175d1d9a777beef95302c7a351598b60cec4c176aff45edf" name="gcc10-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fb6716c2e3316e83f064bc1d9759185a6f90cdc49502de823e45b627e83eaf9b" name="gcc10-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="31952ee1cdcd93cf94b5a9edee250898eee4d6ccd94acabbb8c75e66af87ad6d" name="gcc10-ada" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="db83bef1037dffd8f3d62966062effa0689965ae66b9b841240984a934d58ecd" name="gcc10-ada" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="75ec553d44d3615f4934cbb00f7e6c28c3f7b019002899caed4663af9e3bb154" name="gcc10-ada" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5916de8dd5f0c1e74f5ace7e263109a1de2a442b22f76cd428f3de1bfccab606" name="gcc10-ada" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="94f71065cd9a242c15ccbd5ab8ab940f4fcb906f088e64fcfa6a3ffaffc51335" name="gcc10-ada" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0d07884d1f47c3548348a93eee19d5036565cc3d838bb4d5d61a3a3ae7f62bfb" name="gcc10-ada-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f794a8e8dd68adf931e8bd693e365af7a345a41aad5995e4e4489cfb86d9c2b9" name="gcc10-ada-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2dd57f92469d5d7933a84d8858e04b30d56fe054c6c13924e2889c653c4a4e44" name="gcc10-c++" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b0a2d07d7c38a78b392c1ee05a54467340959b4001625795d1ee03ecf7785e8f" name="gcc10-c++" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="388f2534ea91888b757e761d57eabbb6d9417c9de7b890e4060011cc64ec9fe9" name="gcc10-c++" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9b3274a53ad5505d81cf0f3ec0c29232777349001427fbca9adc8bec6dd70bea" name="gcc10-c++" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0518f0ac3f644c57c289f66a915f20f0c26a3365b7c4b1937e704752bc5fedc5" name="gcc10-c++" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0ce24e2b6cb6c7648a4e802c592101908e7ce721de3a9cdca2ed2f2d5d3cc73e" name="gcc10-c++-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="371a2908a59d52789739651873e57572fbdbe700638e6d910d832be3c92c8206" name="gcc10-c++-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c3788d8023756ca0ac69c93f206384561059595270e7bda715b91d0cfdf54d4e" name="gcc10-d" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6fbd2c4a3edee1aef965c86e7d7b70ab3c10f7043c0dc2b56dcaa896457afe7f" name="gcc10-d" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ad3138404c5d3aca951a779b01373ce9841d76f56e8f4caa9107a33d37bc6ea5" name="gcc10-d" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="902ef943f2d779dbbf1f6992b22fc2192a41170e4c60791bc5422bbc49d1002e" name="gcc10-d" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="443322e1b9f3ff9684804431ccb5c43f82fd218a6a0edb99d8bc10655cc962be" name="gcc10-d-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="43b01159f2ff0fda38495439ea38123cdd43349d06d341e4dfb6f25ec184601a" name="gcc10-d-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0c47c76dec5e004378c9e95d1a45e5e22127fbe064fc036fe798bae4632bd599" name="gcc10-fortran" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a71868e8104179f82622b9eb08972ac0e892cd6ec4331d25f067a2f6b2401de0" name="gcc10-fortran" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="083bb15dd328192cc32cbe574c9778e897e3b48b8163cd4a74cd545bb4fc800a" name="gcc10-fortran" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8823e8d869d8fedb64a679fcb757ba37479a8ca2e14250805d814770b81c78fa" name="gcc10-fortran" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ad33b70c9119d65bea74014febdc370197eb6f5a5eaa2da5ce8693a9e493fa47" name="gcc10-fortran" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7345e3cf30efd641b3332f56dde01fbaff99a9705c59d543f5ad33aa9fb342e3" name="gcc10-fortran-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="4f5e0f33678052a06e28e8f432637973aa6894599d2db093ac1ecab632c943f5" name="gcc10-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="77b40c4b6816dfaa4ebb1d4d69d05c084c02cf44d733698c6ff753b7afb1e5bf" name="gcc10-go" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d4988cee96d0e1d744e73ba800b59b60a276fd524aaa36fe660bcce5bb6a4b0b" name="gcc10-go" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="bc1033e800c901db3e4d37580dfbf01eeeb7266958180a620ccb3ca6c2f04869" name="gcc10-go" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="bbb1d2f042f26a7de8d8f2a9570d67a30bc6dd8ccd1afb4116fb0d5f0f340e59" name="gcc10-go" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ee9045840f47307413fa3e3e9a1d882908535b6be7b67474b890adc378b99504" name="gcc10-go" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1a42ad44c0154b6b1d82c660f9c412cc38b518db7f8b8ffdb9bafdfbcab2945e" name="gcc10-go-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="917c4f95fe77a15fc70ba66909e6b5747c095d197aab8236bf7ddb4144053907" name="gcc10-go-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7d46d8cd9cd98b5ce1c87959cfe618893383efad2f13d6eca4b74935360fc069" name="gcc10-info" arch="noarch">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6293b365746b24db26855d5059cb3ddc4688648d2db09da9da82943b6b2c168a" name="gcc10-locale" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="063a8dde22c6144a83bc52f26142648d4198ec345742e0103673943e32c6cf9b" name="gcc10-locale" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="4c573a50c6e3912e1c2245122dc6e23a7ff23f00a2ea49e898cf8e7b096b5806" name="gcc10-locale" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3a30002423fec58017cc98e7b62df09bee8d6dba792491d756509292760ec228" name="gcc10-locale" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="90676dfecfa6b0f5880cce96cacae90cc1cd3c9093f310df4e7af9b66245718a" name="gcc10-locale" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="4eb310d69b97af683c319ef4cc6e207ff91cb5e466746a8601fd11fcde559857" name="gcc10-obj-c++" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d50e65e2abbd0806efb37c82feda454b04b8138ff718c7dbf9953436cfaba643" name="gcc10-obj-c++" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="16f86a8f6929d63597235b3de3fa388b59c3ad82bd6780ce8b3b76e5c5a0be76" name="gcc10-obj-c++" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a77dc87feb20cbbb0c4aa89f11f3faa5bd3beed718a2139d86cfce27b061e9f2" name="gcc10-obj-c++" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="92aae33784c50c874cef17e4ff37e8ed28b152f12059d04db512c82d078e7632" name="gcc10-obj-c++" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="62599b58dd803d24d195ef687ab5274ef46477113173f5b018883ff016a7424b" name="gcc10-obj-c++-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="61e6d1b532e296e5cecfc179c1b015fc4ccd5527f2e7e25de39bf31d039153df" name="gcc10-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0458dbc3ee65925abeaab69937954c8a683814b687eec01b82d0145002f75cd3" name="gcc10-objc" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a2705cd443423cd4e67ef43e23ffe11a30d2ebab467624e43b4ef2019d667613" name="gcc10-objc" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="70bb6ddcfe88505fbc97ff80e99c7ab79760c9ba4f4dc460a635ece0668595b2" name="gcc10-objc" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5f43d93ec8fe7224016672b26d5b522c0d76cf980a5b62734e86fd34cd056f3c" name="gcc10-objc" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="df425c4d206ab9ec3354390aa8dd6f3c3a158f0ba8433b6ec638e93a9a528be2" name="gcc10-objc" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c151068dbe030c892f40eccd597805fca17261a0d416ca211a8d8887c1cede29" name="gcc10-objc-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0a60e1e51f832d1fe98556877186c6a280a8823447e41f9a07efc266858bba6f" name="gcc10-objc-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="e68358923a344b12948c88af16ce677cf8ec9d560453efde071ad07c0021beb7" name="gdm-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="a1e97a8699211269d6ac84e8c310b5a03fb06a84cc9959b78ee7fe200eab789a" name="gettext-java" arch="aarch64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="1b8f4765347425c8c7f2c0744aac1cd5d67ddcc1113c60b7d09eaa43e16e4fd8" name="gettext-java" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="edae0b906d69e4a72addea55386506b24ba700a2f2eea5773deccc174c8dddd3" name="gettext-java" arch="ppc64le">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="3c490e24763c3433acf5f2260891d6dcc0feddebceb4baae0f679097501af313" name="gettext-java" arch="s390x">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="cf114b3b27c1bda1cf6c40dbf9f0e2fa7d41b5275d544ea12ed2cbdc3c376203" name="gettext-java" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="2298d7506066741647849b07307814183e46d6987939971b2e635482161fcd8b" name="gettext-java" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="eba13403e9aa57d0ac9ffdd35ac50c10f18b5f208504539740bd1c33f43d54b8" name="gettext-runtime" arch="aarch64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="c8710ad8d512d9f8799a558d77726906ba50fd5fdb47cf5569ad6b4544710cec" name="gettext-runtime" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="6a49822d3641a88987b5869799181faf23a6a75503662575af930533fdc21238" name="gettext-runtime" arch="ppc64le">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="15c92011b79fbe5eb0aafdb3b4fae39514c140db1fba667bf845e48eb96f4b3f" name="gettext-runtime" arch="s390x">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="a060f5a03e783cbc9cbf0be154e4283f02d56f260263696d2b69a1274c7e1129" name="gettext-runtime" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="141b5d33c5a10d4031498180064b5bedd7efbc2a0e2e2e873b90c07ab991ee23" name="gettext-runtime" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="8d98fa5ed6ca59daff12a98642baa25301cd727beb9374ef46700daddce04678" name="gettext-runtime-32bit" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="4b6d00aedb1f18d90b2aa996623869190cce318e4c8cd6106e9baef7bdc0839a" name="gettext-runtime-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="93ccf3775cc61a84d7a69237bd48ba275e4ad64022a7af4b7547911d6b368ec1" name="gettext-runtime-mini" arch="aarch64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="05b5963d422a85538b8a214959ac6acfb35203af4419094f7bdd214c270f9347" name="gettext-runtime-mini" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="3c4e3a7c963149ae3c07e760f131a427f573a035b77a325b8bf62ae7fa2738ad" name="gettext-runtime-mini" arch="ppc64le">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="9f7bdc20709f546e26f06c259f5dbb0f72195f028a44ba873ecd5baf5c3a99de" name="gettext-runtime-mini" arch="s390x">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="c96e1aaf627de54b1c272d71827bcef9e6176eede3f3d69361d817fdb876744f" name="gettext-runtime-mini" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="6249d453e6dd116be4dfc215dafda0456934d3aeb21a2e922653cc90f36dd789" name="gettext-runtime-mini" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="955785d93393943e58140efebf907c3554aeee9f1e898edb1127a1e3115b902a" name="gettext-runtime-mini-tools-doc" arch="noarch">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="b890aaf85937cf5300c281a4acc25de11a3da9f7f970cc5f95d822724b27f7c5" name="gettext-runtime-tools-doc" arch="noarch">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="0daa9c4711a7ab4f1ec302d80bc3891b7f7088bd31d2b043cd646ca12828730e" name="gettext-tools" arch="aarch64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="1702b55cdc854980936dcf2c53c25e8342f8e7770902bf0320383069b1348312" name="gettext-tools" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="6d1be0047d33c24a53acc136fe13617d3144b082b3c5d765dfe466496d7ea546" name="gettext-tools" arch="ppc64le">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="8c5c1b5a3bc326db93423464a11f8dc2608c92e6ab57340dd38403f7a5d2e6eb" name="gettext-tools" arch="s390x">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="18fbc8dc949879b54b82fcb70bc8d244583a6f794ea7eac9b86ccdbf236829bd" name="gettext-tools" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="ad7a6cdec9bc8007ca4ccda9664db5eb487d85131d915ddccf501ec416cbcc38" name="gettext-tools-mini" arch="aarch64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="183ff33b9984c4ca3468a6ccc82e20e2a8c16b7ee514d3ea11cca551a3be9f3b" name="gettext-tools-mini" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="8802c13ada6533a8303489c040669ebde8e87a1f4a051c4ea9ec9087e4adfa1a" name="gettext-tools-mini" arch="ppc64le">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="479fead6a697bf710593029564fc1432322603d6f2aa35c746e2431a3131f6e2" name="gettext-tools-mini" arch="s390x">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="569b3c38fee7871fdf119c58ee2fc652ac60bd60c2bc1e069c819580edc886d5" name="gettext-tools-mini" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="4.11.1"/>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="christian.voegl@suse.com" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="christian.voegl@suse.com" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="christian.voegl@suse.com" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="04b01d5f18c390d19be5620d81eafd734bdc2934ade56e19ab56952f350cde87" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="aef88ec7c89898cc3c68ee67ca5d66f4788d92ba590a253795be4b915c64eb89" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="8e4d5949d381ea5914ac489446934b95e35975a117ae6f2a9d14aa4ffd749d03" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0f22a3d5a854c4517085f7511d8a840853942cad1228a8d3e93cd151b6d7a0f8" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0c42e9366c93cf5d07894867f8f48f49fbb0286ae3ce3955300e98e7c9132c44" name="gfs2-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="b6fa6c4392ca51618e80a9d40b0489ec4003b05af690a311f5aaf4da9218107c" name="gfs2-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="c95c73ba9de6c916d319e0d5df90d1490a037bf35ecd14e3e74e9562d1977b18" name="gfxboot-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="a204ee58627e5e76d709b4173f3070d5144d839b852f2dbe6500b4aa6966b275" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="bb306e42fef0f9336203e43d237951617d814de379c849dec89d6bab4a3d4044" name="gnutls" arch="i586">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="2b3fdbe680e9b785170d65136cdf5da699b8615fc208cf7b038d13c2cedbd5ef" name="gnutls" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="7d63212996fe9afb4e5ca56cfc0879225fd3186a371ce45a8d62e9077997da2c" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="cf6a5fff76e33416f4d50f691a6cd566762ecfa19baeb4687a0375eb0c3a7496" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="c26c7102dabf476788afaefd1d429ecfd6599b09cfa9f13d25dca26c57e4cd7f" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="51051f50029e3dfb68e28b09f1c44b39df4770d13e76f458caddd96e5599c236" name="gnutls-guile" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="9152adc859a638be983077a898fc9d278306ab7807b9500da44913b2800276a5" name="gnutls-guile" arch="i586">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="37f5c877ba8181e9842825d721a3f2a7c5425e492327ed9a369fbe5ca6f57936" name="gnutls-guile" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="5295328b6e3016e2cd6b6455802fb4190eddccd7966c74a6c5db8e4fe2ead0a2" name="gnutls-guile" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="0ce22824bc9ac2875cc5a9ea0b967506623c32850481467f722e016ecce19822" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="67144ec0b2844aa76f4c57b93849d893678085244b6ec78bdc73aa4c55d9912d" name="go1.14" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="e7befa9678feb7d362552515033fadcb8a2d089921312502b82c8d797e9e6e45" name="go1.14" arch="i586">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="7df0f37aca2173b0ca10e9c07180f0cf0fa9127733407a68d9f3f90d07d990eb" name="go1.14" arch="ppc64le">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="43471b12c0e3bba40cfb3c45af7a16de81f29ba1c3108e24439f333bbb764831" name="go1.14" arch="s390x">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="729bf1db13c022059a305c9fd50e2d63396b00b23df9fbfbb4a69100f7284cd3" name="go1.14" arch="src">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="fce9bb036e55ee3f754a496f31ef3449da0e082fc633f8f17a7f883e767359ec" name="go1.14" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="41d33be7e1d7565cddee95c691141ab77c8e4d8d27652ab67a7a3445b5653fa0" name="go1.14-doc" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="7a46c2cd48d4b25428667d894d7ce206cc4660eb87ec766b226e1756303d98de" name="go1.14-doc" arch="i586">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="d1b178ed4c1e32743683ccd78ddeecd88737a28e0d82b64d73e211ca001ccda3" name="go1.14-doc" arch="ppc64le">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="6ff6f1c1327f108a73f56ef7b66b866965d29a85875163cae402b87c8a5df12e" name="go1.14-doc" arch="s390x">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="6b4eee917106daadd896c0a4b1e02ddaabc1367d7a3b7ad9b50018c9d22b3203" name="go1.14-doc" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="698b05eb82ab8576f868f6cea7b935cca414f36ee60df3b0e50d2abe52647b9b" name="go1.14-race" arch="aarch64">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="fc2590f73a4b827683b7dd6d9da6e4ddf2d374c616c5fce250f52bec2d084a1a" name="go1.14-race" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="1.21.3"/>
  <changelog author="rbrown@suse.com" date="1591963200">- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present boo#1172868 gh#golang/go#35305
  * add go1.x-prefer-etc-hosts-over-dns.patch
  * Patch renamed and fields added per packaging guidelines
    on 2020-07-15 by Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  * Patch can likely be dropped for go1.16 in February 2021</changelog>
  <changelog author="dmueller@suse.com" date="1593432000">- Packaging improvements for update-alternatives priority,
  %license tag, and permissions in %files macro section.
  * update-alternatives increment priority on this and subsequent
    go1.x versions using priority = 20 + (minor version) i.e.
    go1.13 = 33, go1.14 = 34, etc.
  * Use %license tag for LICENSE keep %doc for suse_version &lt; 1500
  * Remove %defattr(-,root,root,-) in %files</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Add support for riscv64</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594728000">- go1.14.5 (released 2020-07-14) includes security fixes to the
  crypto/x509 and net/http packages addressing the following CVEs:
  CVE-2020-15586 CVE-2020-14039
  Refs boo#1174153 boo#1174191
  Refs boo#1164903 go1.14 release tracking
  * boo#1174153 CVE-2020-15586
  * boo#1174191 CVE-2020-14039 (Windows only)
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1594987200">- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs boo#1164903 go1.14 release tracking
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string values
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596715200">- go1.14.7 (released 2020-08-06) includes security fixes to the
  encoding/binary package.
  CVE-2020-16845
  Refs boo#1164903 go1.14 release tracking
  * boo#1174977 CVE-2020-16845
  * go#40619 encoding/binary: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1164903 go1.14 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs boo#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes
- Use go_api instead of version for update-alternatives priority
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.14.10 (released 2020-10-14) includes fixes to the compiler,
  runtime, and the plugin and testing packages.
  * go#41815 database/sql: TestTxCannotCommitAfterRollback failures on windows-amd64-2008 builder
  * go#41796 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41619 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41322 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40880 testing: summary and test output interleaved
  * go#40694 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40647 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40642 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="77d02c07d6f9dbc80f3db200091df8bb329aee9ca81a6f2a820595604a9d6669" name="go1.15" arch="aarch64">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="bbf43fd5a3e41d2313881d5c5b0cb16eabe95d57a33d3d5357f955cf2bba8416" name="go1.15" arch="i586">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="f8afd75899e4248f70daabfff10f2000fd335c82bb80628494e859ea1e190d2a" name="go1.15" arch="ppc64le">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="94f758fb32b800a27d2fc3493a97880749460a45d32037a7d64df042680bf608" name="go1.15" arch="s390x">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="0e115e511089bad01146677a3d13bf1c098f5c62a61b0ba0dd4323a790f329b8" name="go1.15" arch="src">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="a19fa57345da9c5e1d14ab77de18d56bd45aa8538b7094fc54cf8e7ad80b9b11" name="go1.15" arch="x86_64">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="9fe61ccab71e3c97397ea03072ff81810f42fc560cddc863f88d703cc4dfa67b" name="go1.15-doc" arch="aarch64">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="50bbe16e96dd4e0b548e3ad3cf4b6dbd31fc4a5d1b774fbf92cc5b63657ddbb9" name="go1.15-doc" arch="i586">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="588026b88a05bf834f03e0af6015ffe08bdf566396b5876368145b6998bf957d" name="go1.15-doc" arch="ppc64le">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="7a5de214549b56c5f1637293cf7c2336aa7010648d6cb3c62a0fba016bcb681a" name="go1.15-doc" arch="s390x">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="93ad778286902b5e31e3c9a2587d10ea8204c9a3c1fae72b5b05d77e3095c4ec" name="go1.15-doc" arch="x86_64">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="da3e8515ac4209e68fab78bebfc9e002510d54fb02f4ac2d4dee30aac6f01605" name="go1.15-race" arch="aarch64">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="cc9ed2e231960079dd87a30061f6799e20174ce53633a59061fc00cf2447481c" name="go1.15-race" arch="x86_64">
  <version epoch="0" ver="1.15.3" rel="1.6.3"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
</package>
<package pkgid="534e9471e332f5230f436cc32b1723d382ec33d76b04606b57a191dad7e54776" name="golang-github-prometheus-prometheus" arch="aarch64">
  <version epoch="0" ver="2.18.0" rel="3.17.1"/>
  <changelog author="jan.fajerski@suse.com" date="1565956800">- remove 0004-prometheus-buildmode-pie.patch
  + this patch produces binaries that crash immediately
- add -v to promu build command for better build debugging
- reorder some %install tasks</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Do not install the firewalld config file on Tumbleweed (on
  versions newer than Leap 15.1). It's installed in the main
  firewalld package.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574251200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch
  + Fixes crashes when systems have no FQDN
  + Adds Parallel calls to Uyuni API, meaningful performance increase
  + Adds Support for system group labels</changelog>
  <changelog author="mrostecki@opensuse.org" date="1574251201">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
</package>
<package pkgid="2b3f28b9ff0e3caeb28f6e298cc168cd185e2b0399be78b76df405e8fd31bed6" name="golang-github-prometheus-prometheus" arch="i586">
  <version epoch="0" ver="2.18.0" rel="3.17.1"/>
  <changelog author="jan.fajerski@suse.com" date="1565956800">- remove 0004-prometheus-buildmode-pie.patch
  + this patch produces binaries that crash immediately
- add -v to promu build command for better build debugging
- reorder some %install tasks</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Do not install the firewalld config file on Tumbleweed (on
  versions newer than Leap 15.1). It's installed in the main
  firewalld package.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574251200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch
  + Fixes crashes when systems have no FQDN
  + Adds Parallel calls to Uyuni API, meaningful performance increase
  + Adds Support for system group labels</changelog>
  <changelog author="mrostecki@opensuse.org" date="1574251201">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
</package>
<package pkgid="ce61b416865e8439e15eec56b90b1878c34e9621344b4ae494b51d510d30d0e8" name="golang-github-prometheus-prometheus" arch="ppc64le">
  <version epoch="0" ver="2.18.0" rel="3.17.1"/>
  <changelog author="jan.fajerski@suse.com" date="1565956800">- remove 0004-prometheus-buildmode-pie.patch
  + this patch produces binaries that crash immediately
- add -v to promu build command for better build debugging
- reorder some %install tasks</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Do not install the firewalld config file on Tumbleweed (on
  versions newer than Leap 15.1). It's installed in the main
  firewalld package.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574251200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch
  + Fixes crashes when systems have no FQDN
  + Adds Parallel calls to Uyuni API, meaningful performance increase
  + Adds Support for system group labels</changelog>
  <changelog author="mrostecki@opensuse.org" date="1574251201">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
</package>
<package pkgid="79ec042706b4b0ca7cad12bfd2cbb601852d5f67ba9f88b24b5370ee1ffdd8e9" name="golang-github-prometheus-prometheus" arch="s390x">
  <version epoch="0" ver="2.18.0" rel="3.17.1"/>
  <changelog author="jan.fajerski@suse.com" date="1565956800">- remove 0004-prometheus-buildmode-pie.patch
  + this patch produces binaries that crash immediately
- add -v to promu build command for better build debugging
- reorder some %install tasks</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Do not install the firewalld config file on Tumbleweed (on
  versions newer than Leap 15.1). It's installed in the main
  firewalld package.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574251200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch
  + Fixes crashes when systems have no FQDN
  + Adds Parallel calls to Uyuni API, meaningful performance increase
  + Adds Support for system group labels</changelog>
  <changelog author="mrostecki@opensuse.org" date="1574251201">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
</package>
<package pkgid="b3554ce1fcf50573520439ce3163981f3fc38794cf50c7a0ab1110d1ae4751a0" name="golang-github-prometheus-prometheus" arch="src">
  <version epoch="0" ver="2.18.0" rel="3.17.1"/>
  <changelog author="jan.fajerski@suse.com" date="1565956800">- remove 0004-prometheus-buildmode-pie.patch
  + this patch produces binaries that crash immediately
- add -v to promu build command for better build debugging
- reorder some %install tasks</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Do not install the firewalld config file on Tumbleweed (on
  versions newer than Leap 15.1). It's installed in the main
  firewalld package.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574251200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch
  + Fixes crashes when systems have no FQDN
  + Adds Parallel calls to Uyuni API, meaningful performance increase
  + Adds Support for system group labels</changelog>
  <changelog author="mrostecki@opensuse.org" date="1574251201">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
</package>
<package pkgid="206f653fdf309e3cc2085881c83e194944802b3e0c7ffd625f8e940618cc74bb" name="golang-github-prometheus-prometheus" arch="x86_64">
  <version epoch="0" ver="2.18.0" rel="3.17.1"/>
  <changelog author="jan.fajerski@suse.com" date="1565956800">- remove 0004-prometheus-buildmode-pie.patch
  + this patch produces binaries that crash immediately
- add -v to promu build command for better build debugging
- reorder some %install tasks</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Do not install the firewalld config file on Tumbleweed (on
  versions newer than Leap 15.1). It's installed in the main
  firewalld package.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574251200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch
  + Fixes crashes when systems have no FQDN
  + Adds Parallel calls to Uyuni API, meaningful performance increase
  + Adds Support for system group labels</changelog>
  <changelog author="mrostecki@opensuse.org" date="1574251201">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
</package>
<package pkgid="006194d972107ca0b89e668e0be2da4bc9e14399da9f9fc1a4a06e32e3f8aa53" name="google-osconfig-agent" arch="aarch64">
  <version epoch="0" ver="20200929.00" rel="1.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
</package>
<package pkgid="60ca9ac63bb1db9bf41328b48a7e01df0b11582262ee98e1671dc38f76987515" name="google-osconfig-agent" arch="i586">
  <version epoch="0" ver="20200929.00" rel="1.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
</package>
<package pkgid="704b34dd07106d0419d8a9a5a708edbc25dd38466f32634c0cfafe8d5b3eb3bf" name="google-osconfig-agent" arch="ppc64le">
  <version epoch="0" ver="20200929.00" rel="1.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
</package>
<package pkgid="850eafd928f54fda456f8e50fa9410a77c91acc447a1b55b9d2505b648712e0f" name="google-osconfig-agent" arch="s390x">
  <version epoch="0" ver="20200929.00" rel="1.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
</package>
<package pkgid="5590c5eee9f2c53ec2851b449602cfc089e04a7a97accea1fe53840c12dd9ca9" name="google-osconfig-agent" arch="src">
  <version epoch="0" ver="20200929.00" rel="1.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
</package>
<package pkgid="bbbe42169abe6faaf860510e86c312750a756aff2d2779c507b85b233cd4e42b" name="google-osconfig-agent" arch="x86_64">
  <version epoch="0" ver="20200929.00" rel="1.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
</package>
<package pkgid="56d033f507da5fc6df19061ad7d46a8ef1b3955707a92ae28a5c7d0bc6d61186" name="google-poppins-fonts" arch="noarch">
  <version epoch="0" ver="4.003" rel="6.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1611057600">- Create initial version 4.003</changelog>
  <changelog author="fcrozat@suse.com" date="1611144000">- Fix url to download archive.</changelog>
  <changelog author="fcrozat@suse.com" date="1611144001">- Fix copyright attribution and other cleaning on specfile.</changelog>
</package>
<package pkgid="c4f2a88da3134d4de28b72f049a039e7f9461c3107d537ce8c9272b64a5948a6" name="google-poppins-fonts" arch="src">
  <version epoch="0" ver="4.003" rel="6.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1611057600">- Create initial version 4.003</changelog>
  <changelog author="fcrozat@suse.com" date="1611144000">- Fix url to download archive.</changelog>
  <changelog author="fcrozat@suse.com" date="1611144001">- Fix copyright attribution and other cleaning on specfile.</changelog>
</package>
<package pkgid="fe709e4fccd3a503ec77bf4ea8f20853b8b685a5d2ff203e2f32c827fa95869e" name="grafana" arch="aarch64">
  <version epoch="0" ver="7.1.5" rel="1.12.1"/>
  <changelog author="kastl@b1-systems.de" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="kastl@b1-systems.de" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="egotthold@suse.com" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="jkowalczyk@suse.com" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
</package>
<package pkgid="937c4306d4eb148f1dcd30fc0f466b15c529decd65ccddf0abc251230024f1c2" name="grafana" arch="i586">
  <version epoch="0" ver="7.1.5" rel="1.12.1"/>
  <changelog author="kastl@b1-systems.de" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="kastl@b1-systems.de" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="egotthold@suse.com" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="jkowalczyk@suse.com" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
</package>
<package pkgid="8d5c0a71132434d7dfe29c9d01d863a6f4c358883988f49253f39057d9da0b47" name="grafana" arch="ppc64le">
  <version epoch="0" ver="7.1.5" rel="1.12.1"/>
  <changelog author="kastl@b1-systems.de" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="kastl@b1-systems.de" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="egotthold@suse.com" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="jkowalczyk@suse.com" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
</package>
<package pkgid="34c5bb9839052babc17ca5d8e748f827b445bf3ef9a9a095164d3b22000e2a5e" name="grafana" arch="s390x">
  <version epoch="0" ver="7.1.5" rel="1.12.1"/>
  <changelog author="kastl@b1-systems.de" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="kastl@b1-systems.de" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="egotthold@suse.com" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="jkowalczyk@suse.com" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
</package>
<package pkgid="5949995306ab7fc76b7482f1e112d7e3f4ad1e42c56573b42caadf9794f7ae6b" name="grafana" arch="src">
  <version epoch="0" ver="7.1.5" rel="1.12.1"/>
  <changelog author="kastl@b1-systems.de" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="kastl@b1-systems.de" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="egotthold@suse.com" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="jkowalczyk@suse.com" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
</package>
<package pkgid="3ee566a0dcdb6497a4ba57b99afc7f09df841d7e1f2afa27bae49ab8aa9c88e6" name="grafana" arch="x86_64">
  <version epoch="0" ver="7.1.5" rel="1.12.1"/>
  <changelog author="kastl@b1-systems.de" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="kastl@b1-systems.de" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="egotthold@suse.com" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="jkowalczyk@suse.com" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
</package>
<package pkgid="e9ef3b962123351fc816ea8311386e316492b9e27c24fb7a8cde2bc3e12eb9d9" name="grafana-ha-cluster-dashboards" arch="noarch">
  <version epoch="0" ver="1.0.3+git.1600360477.8b8f9ce" rel="1.8.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
</package>
<package pkgid="21bf35f879137c9ede6feb09c58123fb38910857e36fc43883ddc14152d13bf9" name="grafana-ha-cluster-dashboards" arch="src">
  <version epoch="0" ver="1.0.3+git.1600360477.8b8f9ce" rel="1.8.1"/>
  <changelog author="stefano.torresi@suse.com" date="1591963200">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1594728000">- Release 1.0.1
  * fixed datasource variable initialization
  * minor Grafana 7 compatibility fixes</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.2
  * update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.3 (jsc#SLE-10545)
  * don't use require grafana, use recommends
  * fix permissions accordingly
  * fix minor typo on dashboard spec file</changelog>
</package>
<package pkgid="3b0224772f329b80b4b6d64eaa272a991062c2820cf821602906dd66d19e71a2" name="grafana-sap-hana-dashboards" arch="noarch">
  <version epoch="0" ver="1.0.2+git.1600361067.f7c00d1" rel="1.8.2"/>
  <changelog author="stefano.torresi@suse.com" date="1594209600">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Remove "detail" word from file names for simplicity
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
</package>
<package pkgid="8db1cbc8aee58c8b2bdc7f9de4f4df8ce96ef389ff1e2b21ac4a8abac9d40402" name="grafana-sap-hana-dashboards" arch="src">
  <version epoch="0" ver="1.0.2+git.1600361067.f7c00d1" rel="1.8.2"/>
  <changelog author="stefano.torresi@suse.com" date="1594209600">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Remove "detail" word from file names for simplicity
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
</package>
<package pkgid="786514e71c6ffeb31c274aa12705aaa12e92b44a8cea4c1c3185673a99d88326" name="grafana-sap-netweaver-dashboards" arch="noarch">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="1.11.2"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="196b157433921b88e5f60264fbbb4fb52f1740298af46bb1dfd7ab378c08a21c" name="grafana-sap-netweaver-dashboards" arch="src">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="1.11.2"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="8ac4e9cc857dcdd5bf47ce460c85f3d7a8bb561c2a339d1d5ff4bf496f87ece0" name="grafana-sap-netweaver-dashboards" arch="noarch">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="1.9.1"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="2ce5bee4e08e7953955236f00a6ef0c12da24f846f60121204e8bd1444c70a1c" name="grafana-sap-netweaver-dashboards" arch="src">
  <version epoch="0" ver="1.0.3+git.1601889366.9f71957" rel="1.9.1"/>
  <changelog author="stefano.torresi@suse.com" date="1594814400">- First release</changelog>
  <changelog author="stefano.torresi@suse.com" date="1596628800">- Release 1.0.1
  * Update schema to Grafana 7
  * Update title and description</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Release 1.0.2
  * Remove useless macro and fix typo in the meanwhile</changelog>
  <changelog author="dmaiocchi@suse.com" date="1601640000">- Release 1.0.3
  * Add variable for prometheus datasource (bsc#1177229)</changelog>
</package>
<package pkgid="140471590fd736a802d3ae1bb2fffb82a751c457db3ae62fb026882e4d0309ef" name="grafana-sap-providers" arch="noarch">
  <version epoch="0" ver="1.1" rel="1.8.1"/>
  <changelog author="stefano.torresi@suse.com" date="1592913600">- First release</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Version 1.1:
  * use recommends instead of requires on grafana (jsc#10545)
  * change attributes on provisioning dir, otherwise grafana fails to start
  * create grafana/user groups to fix permissions</changelog>
</package>
<package pkgid="926e47c1c05783bb8ab9e97fd62fa13e9849951d9d8cf898649e609c6f1a38df" name="grafana-sap-providers" arch="src">
  <version epoch="0" ver="1.1" rel="1.8.1"/>
  <changelog author="stefano.torresi@suse.com" date="1592913600">- First release</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600257600">- Version 1.1:
  * use recommends instead of requires on grafana (jsc#10545)
  * change attributes on provisioning dir, otherwise grafana fails to start
  * create grafana/user groups to fix permissions</changelog>
</package>
<package pkgid="03f9bd0d95dcee56972909edba1225fcc91955bb850eb6ed8fa2eeb471490784" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="16300388c000e39ce865aa35be91fad5879b0d3f6f2689277c140b8e36ddf10d" name="grub2" arch="i586">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="e0c934536c5da7d67c4c3cf20698a70c4c66d8bd31afdc44f328231677c62f35" name="grub2" arch="ppc64le">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="809dac48538d0fc7dd9037e4bd58e1f22c7ae8a44cd30722636194b96e02d2a9" name="grub2" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="ca0d76a424dcaeabf7e4998731634b14a85c9a7ec1698aaca645429318cba0ba" name="grub2" arch="src">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="3d32cf68338a88c73c5578b611db9374331f024145503022d6809b1ba3587f92" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="92a424c9c76aa825a1e1e292f5cdfc5e67f0704e440a24969761d76ae5917a48" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="4b2692c550db6af1cf99b96480348e1148b789efed7637b9cb20853f7b1303dc" name="grub2-arm64-efi-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="2fbc5bbe6a78331ba6ad81b20798eaba96d1a42ed799e6c38ec53dc959a38149" name="grub2-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="b3a3779b4051047efe1539b0e284ae623d4ea67e4d7f4164cbe09050a1e85396" name="grub2-branding-upstream" arch="aarch64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="c1388aff267cd43ab51a02a2ec101bb9f16999a96a8cb2da3d3cf6fe979891f6" name="grub2-branding-upstream" arch="i586">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="2924faf108bb4b10ebd2fbf65786d93047935b0fd7c321d4f6858939acab23d1" name="grub2-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="538d518c5705e1215356164bf8adf147d8468d4e74db69a939ced49ea40382b7" name="grub2-branding-upstream" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="ce2401b94938036dfc58ef3c3f3e5ad8b9afe1ff0dbdaab4fa80a5d4412c8da6" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="7b2fbf4f3f0a7bcb3d5b5d0651c9d809f574064b8c0fce40032c02c0eb35b3cd" name="grub2-i386-efi" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="f880541a90d679abbfda433e78e2e4d0b43ca475b98684135d23139adb13b58a" name="grub2-i386-efi-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="dbea998273334876b8b4ebe6cdf8271e605c263cb45b538c6904d092c35fc9fd" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="70025f8f40811452714207bead9bc68cc6589bcd6bdde247e26277210743187f" name="grub2-i386-pc-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="a60425b443878b846fa8bcb60d1bab80e2efd2ae035cb6c061299a7e234c8667" name="grub2-i386-xen" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="982f494addce25f8ed2cb5e73cd9090b730bbfefc50aa35a068404f0ffa0a316" name="grub2-powerpc-ieee1275" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="4d93528e341c2504396f312e0ac6fc268c02c9a8e8b85d5a4061d084209b8851" name="grub2-powerpc-ieee1275-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="dcf44e0993093457e9b7b6643ab21eab1dd16cf2a4a332547ccea36067e59da2" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="19afdd6458e971c99ea3c07cc3e5c41f6948b81b398012e3c5284aa2a7746d14" name="grub2-s390x-emu-debug" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="c3106bda6de35d437816b575d6218d1ccda4ad8cd66a9ba4b4afe8f0894f8d35" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="0cd73664db4e870bfb58bdd7db58c1c1b8369db7b4611bebbb7e401e058accb8" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="3a95120eb014e4be594730d71abf65f8fbd5856bcad94bf43923dade4f95b130" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="b3a0deeb1af725531d0c52015d617e6cec6f52e5555bd128c031399b0c82f997" name="grub2-x86_64-efi-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="7a727bc5e79b89def6b62b6e48d8a0e59ed3093a07b422903fd0851ebaa462dc" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="b6aebad3f1fc5cdf3cf92b9b9e148b43d0a5cc121fbe4d3a69d7425b78ffc302" name="gstreamer" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="d20faa61adc80ef7a7ee21678d70e1afc285840a1858894147e401878d5ca0da" name="gstreamer" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="41ab79203d6f43515a976d08436d51b57a2b2a5a7f7a1fb6779d3a9e9d2dd740" name="gstreamer" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="2b23b8d8190bdd45a8d6ed19be534f429eb9410691a228c2b3729795460b555d" name="gstreamer" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="99b2479112486698b5d33f912b0a23f6e13c26f993b93eea7c21bd7088b92a63" name="gstreamer" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6ba4e77d427fe604c76ad6811431195090d345e79ded96e59dd6ebc7c8d96096" name="gstreamer" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="8e05f39f50266a021125ca9df98af1ebc9f1581146298862d4ac3b6c5e8af639" name="gstreamer-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="69babc3c092437779576cb00040d480ce296039617578a9e9fd9f3d833a509af" name="gstreamer-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6364d728d86dbca271d8b3fde1d5d076f04263709f6a4a4f9614dc21b188a5cd" name="gstreamer-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="c2ff90f3f53938072f5ed362b49f17972187646f9689f5cdc3656321ff08f756" name="gstreamer-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="76d274e17458b0ab46e80241599029e7cacee90cd95356a6c394b674f9bb50be" name="gstreamer-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="b08ca98f9a984a35083e5ebc03c10dbf2272baff838879b4d567c0ae73cb9318" name="gstreamer-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="4b7bd468c09fbc98400ffd223fd2ef3ce2af9b14d41f19f86a96cbbc5a09bf19" name="gstreamer-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="c9b695cd2eb833a4af1e7b95661425abaa9a6a0d455a69fb08c9af86e11dfe69" name="gstreamer-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="3692a53fd89951f367f29411e30357ed161998e9ec629567280c62b84efe877b" name="gstreamer-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="0c8400638fdfd415f4d80135ff2bdab1a3e190668bd9425f60a1a87c890f9e2a" name="gstreamer-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="45eb50e8946f1d33d32ddf82bfba6b4fbbd34aa2e16aa992ec1626365f8e05dd" name="gstreamer-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="29d84a3cb9cbb9c78e805766e2a31e46f3cee4aa5f66e03bac2812884eee4298" name="gstreamer-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="d17cb5d1f6422ac039b425c5b7e4945a53486a667468b8febe49daec21efa641" name="gstreamer-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="97feec3df0ef9d1d6a007cb6854743980bdbcdf8eef303a65e2e5bb7e7af678c" name="gstreamer-plugins-bad" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="321cac67188caad214d690a173afc9fd93acb1ce84434396f66db816a4820c29" name="gstreamer-plugins-bad" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="1c26d87cc483b5daaddf4bd6734c94aa56436b30877eaaeeb7d5d6c7efdd9b01" name="gstreamer-plugins-bad" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8e04a83d1a15019aea8404602383ce0bd04223623d55e3e68c7f89ce2870d4fd" name="gstreamer-plugins-bad" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="83baba55fbcf1583cddbf4d636309a0741b2d4cc609e4bd257f782733b732c68" name="gstreamer-plugins-bad" arch="src">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="255890c0c3709382a2363dada77136c30fbac0cdc3de4832fa28deed12466e68" name="gstreamer-plugins-bad" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9199dd85bb2cc12ea70700d27620c0514b75b17dec1dec0ef036efcd686dde68" name="gstreamer-plugins-bad-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c441ddd1450cb5f18489ac6db894ae70979c92021df31f090b0325d5f8798641" name="gstreamer-plugins-bad-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="2b4a3c13459baa45a88bfe1f33668dc00a6b8f0e0a53f6996167e7b13d42d7e5" name="gstreamer-plugins-bad-chromaprint" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="97da191ccd7ed3b352d3d7b73ed280bf2f8527f174a8f768e135855a07d6b8c8" name="gstreamer-plugins-bad-chromaprint" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b928d95394bd6ceb2bc06a6ff11f641bc0be189a3888d2e994dfc248a50943fa" name="gstreamer-plugins-bad-chromaprint" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b6a26dae0b75f6dfb658eacb39ccda90d13af0e54703e801dad555751d9d9f25" name="gstreamer-plugins-bad-chromaprint" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="38bf9d1e64c0e875ffd6521ba2527191586a3f3fcb579eb5e1a680efd44ae978" name="gstreamer-plugins-bad-chromaprint" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="95b6338af3b422ec4359c0f6f3c04336ed14c3cd5f51fbd740b984c6c98b6a40" name="gstreamer-plugins-bad-chromaprint-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="715e336a93fe522c2ec70be94277c5f5a729b729750b9afc9438a922e01a766c" name="gstreamer-plugins-bad-chromaprint-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b19642e34b27d9c1898137944afeadbc1819d8cc44538ff24e951f77509299f9" name="gstreamer-plugins-bad-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="cf5924df0084f1d63981a0932ef8f675675bbd7b186c38237d677aba4aa9e048" name="gstreamer-plugins-bad-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="848d478f3dbb6c92ddc63972e675ac11c8e24649666dac21bea1827d17f44d87" name="gstreamer-plugins-bad-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="eadd5ba25012fe33bb5e8fc25b6322a16e0b29d29022875ef863bb1f3a425169" name="gstreamer-plugins-bad-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="63a7986c3a3a772a55b8c86169314b9f876381540d6b2ad83c00aa760178cc7f" name="gstreamer-plugins-bad-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6a03d46deb543417f6d33ebdc32844252b0d07ef45d4dbfb0475c86905b38a7e" name="gstreamer-plugins-bad-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="642f29693e22c7decaff1fb82e6a78b7446995f818067f3b6d4e32e2c6e2ccf5" name="gstreamer-plugins-bad-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="80158c13bbad17d68ea00f8c8994afa214c74643e47178d63128d1f0116f5da1" name="gstreamer-plugins-bad-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="911be2c399819a391e7704e4483a835090bab6093725f8461bbbb4272a947866" name="gstreamer-plugins-bad-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="49fa921c006ada8b4cebc5d1a6a2f0402d4daa4cb5e0c924c345d05e7ce10466" name="gstreamer-plugins-bad-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="966283b141245f46a16e2a22b16f87b79c438ec2062fe4eb8ef6c102d0b234b8" name="gstreamer-plugins-bad-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4f2a519a675e4a003a16bfecabe422a918f15d3ddc2fb188c69f041547b710f3" name="gstreamer-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="881f821973405db84a5cd5e85af391a889cd10b66a69381895cca4bf30edbe70" name="gstreamer-plugins-base" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="410d358476850d4f65d048ff14b5466cdf92e3603bd1b65299fb0ce6c4348bba" name="gstreamer-plugins-base" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="05eef511208ee03753e6624ad5a61c4db5fae79bc35d35626cb09a337ffae8ce" name="gstreamer-plugins-base" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="26930b76a73f3ab1315e533a61b4ed4786322146208563b1d4a5c1ed21102be6" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0800d29a3b2ecc86e81bb7f76ef7554aa3067d108750b413a98ac7a3d13ce205" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fcfd1dc2cda5a5a595354f7ddb30ec667c0fc3aa7b4e8c631682b3658bf2d97b" name="gstreamer-plugins-base-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="00b2567ecb3407ec8c3cd18af6c36b1702e9f886789c79c1e39870002e5a87c7" name="gstreamer-plugins-base-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c1f8e7e582196edcb5b088a828dc1a71370996ca56e01597c47545b2d3483fc3" name="gstreamer-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d1ff76639bb72ef4c259105a44f592ce8bd6ea62a84fc09ba62a4e6351114bb3" name="gstreamer-plugins-base-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="96355a57722ef06a753b961cc4fcd330e5c6f7d14e43f874507a79a01ae970a9" name="gstreamer-plugins-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2b5fb452b429387be6597c6cce7ad979e7aa4706bda50f1699652525bf92e4ff" name="gstreamer-plugins-base-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6df6bed602867dfd0afb090e879a874438320505e06ee5014e3ff08b3ef50ac5" name="gstreamer-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="344b0730e2338b4889ec745ca7e5ac839717bb1349af8fb33e0732d9050edadb" name="gstreamer-plugins-base-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="e36168dbe8ac194e38981559296bee5f9037b905781aafaffb72ee95909fc382" name="gstreamer-plugins-base-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1dcae63c6954f3b00ce1cfbd57cd6506aedbf8ae1fbf95d60e279d0a0f89de32" name="gstreamer-plugins-base-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="122fcf958b31d4dc4a92ed9597117a4637bd7f939534466cac12d304021de1a0" name="gstreamer-plugins-base-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="33631841d3ed6cc26f7d88efc418e9c59ca863b5f92ddb3c0046475d91b762f1" name="gstreamer-plugins-base-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1ff4f22d68a711b1a699c1f76efc9e03ca903edffaf7034f94f489a9ef5c150b" name="gstreamer-plugins-base-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="dd2022bead07345f456d93c95a50a8896565f8ded1585cbd05705afe1d841d12" name="gstreamer-plugins-base-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4ca7ea5b0bfa4306d34c1f6fc4c3e4c377a156fba12bd1975f26078c68f22d77" name="gstreamer-plugins-base-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c1f02b53c20a48258147c8b588be00efba2d63b52dc7e648dba88f1bb848efa8" name="gstreamer-plugins-good" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="42d724a61adec6d1c76de78e90f7b7336f54b7b7454af8baff70ef0e0aa8a349" name="gstreamer-plugins-good" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="5dae0aaf366d6c7049924f3051e306a5e18228817e7e06e9c8ebd6e8d40ea11e" name="gstreamer-plugins-good" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="712fa7dcc01606c7657a7c8fdf8e1999321ee2fef34a817718d6d30c5c971b33" name="gstreamer-plugins-good" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="cb6be0205486e548435301682f085a9564a6681b6adb441374bffcd3b1f4f986" name="gstreamer-plugins-good" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="661efd46f785ae9830cd834298d40c96f857d2f9ab467e16680c2ec367e5bd88" name="gstreamer-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="072211ac5c76890bef1cd61397af8da07a200deb5add8f3de8eb4090006b007f" name="gstreamer-plugins-good-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="fe42f50739079c06f54bde68ee9e1c0f0442d024f4ae26a5bfd5848666c933f3" name="gstreamer-plugins-good-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="86c478db4dd65753c2e1942f40aa3ae7693159c35b35e52fcd97dd6fd8ac3b54" name="gstreamer-plugins-good-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="ecb601830eb06c8578b54f5ea4255288a2d1071d1e41deb09e398e83c8b9bfc8" name="gstreamer-plugins-good-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="1b28501a43b86ef7910be3ba5f2b41d8f755e2d9b7b732d057e6797c6fb6969e" name="gstreamer-plugins-good-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="401658ea78601504f12feda0d4a3d328dbc583aae2d3e5d847721a0e248ccaee" name="gstreamer-plugins-good-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="7b21369b41e8fa998b6a69c90904e6e718a406783240b26a7c7b5999ff0a758e" name="gstreamer-plugins-good-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="2124f1a531b408208e3336192cb9aac294d4ee635a94a1b8d8c91fa9294905a0" name="gstreamer-plugins-good-extra" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="09d433018bef7ff6b19bc1df7c64c1907296df99697560dad0153c7479c64515" name="gstreamer-plugins-good-extra" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9dfe04810cf17c9fdaa7b37d18b0a44db5de730fa33b98a1c4a5989559846a96" name="gstreamer-plugins-good-extra" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="598bd2d61b83c327fbfbd69d8275e51f90c1ade03130d896fced12bfcfe57089" name="gstreamer-plugins-good-extra" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="f670288e20c41d27cde523588f745a18c501d4ba06eeb681ada65b2012c3f197" name="gstreamer-plugins-good-extra" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9845ac6aca3ee9948e27917c145ba0c151cdb864f05d4feaddb3ffa72871e2a7" name="gstreamer-plugins-good-extra-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="3665095b02f62e6301788939d078885b97bffd33dcd8ca111bbe576dd1385f5e" name="gstreamer-plugins-good-extra-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="e6ceb9340118ce3a0cd3a8844f80c04184bb999fa0f7caecf69ff581d749c405" name="gstreamer-plugins-good-gtk" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="7915e6ec504354554f8910c836f21ec97ce82ca40ace37ac10fbe85c727eaceb" name="gstreamer-plugins-good-gtk" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="2612670f6c11b8bcc5f110f38e79798c2812a89eb22841fcf9554d26917738ba" name="gstreamer-plugins-good-gtk" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="e37b842716d0ae047c8384b1b692d01f8a78e6289d6d2afea095a84b56b4e6e9" name="gstreamer-plugins-good-gtk" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="ab55c206afbd0018aa1993c823a3aac6884654f81497a143fedf2997b2f37f88" name="gstreamer-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="c67df775ce008a83cc0ba9b0e2fc00d9f9aa2f150ec413d39c6677cebb8d3806" name="gstreamer-plugins-good-jack" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="88cb40b5f0069beefd3831d1a66c7fd70e5228b6ab90e7b53a7320cfe994b1e1" name="gstreamer-plugins-good-jack" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="dbe2a88d062103eb929994349eff12f02588c30a92d97f2e42ea4283f82a2cd4" name="gstreamer-plugins-good-jack" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="14e6efef7306fb83ae34686192b5b912f2df1357f1c7e2fc9bf6a297b28500ce" name="gstreamer-plugins-good-jack" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="84c72ce662a7d14828e1a956431f83fd4575ebe5fb296b8d22a988ddc9404646" name="gstreamer-plugins-good-jack" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9420d6af5c32283b81ee5703a0267d3655551845de6c9adf606643368141b5f6" name="gstreamer-plugins-good-jack-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="36f1fc595bcf4611c105b24aeb12c022cab895caaf813a55d864778b7e9615d2" name="gstreamer-plugins-good-jack-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="b2176fd78b860798f1ba465f0a9cfcf95aee3d83398b3dbdb90547c854cf0ce3" name="gstreamer-plugins-good-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="5c1594283fa12e218d8660c5ea279c965910ce6f30ec7a38a79c539623ca1fbc" name="gstreamer-plugins-good-qtqml" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="48f04e1a3c2009b3395d7e06a46e80a7651ed9bca21656f28f3a7963cc461338" name="gstreamer-plugins-good-qtqml" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="42242b243c92701e25c345b17d8a66e660212773a8a630a2c879d8d72f241fdd" name="gstreamer-plugins-good-qtqml" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="07e9bb80391a2644c60eccfea6e6d9006af4a91a6d92d8709d883d26b4274d35" name="gstreamer-plugins-good-qtqml" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="081d1d1c6db5890b9a9e8e1b92905c50b8519f4f76b06f4f4d7edb8094fbca1a" name="gstreamer-plugins-good-qtqml" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="d968df0ee4a122a695a8c34dd03bebce77564f41dbc8745185d89eea0ea06007" name="gstreamer-plugins-ugly" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="5b2c3c3d25e9cef4dec488b9fe93e25958707837551bef6cbb4b17ffe68106f1" name="gstreamer-plugins-ugly" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="5e9a46c5878cb525f5cf42788660119d2db1b6ee694f9cf24b2929af1b14b69f" name="gstreamer-plugins-ugly" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="36cfa3cb6adafbb2f8a25fae8c2519cd30de1a512e28c130aebbe829d8a4e600" name="gstreamer-plugins-ugly" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="92c0648f6f2211293e5a90f346e760db5e57330a9b7c7a5a99f60d290239de89" name="gstreamer-plugins-ugly" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="acd8359b396084bbd693b1a14318cbc222b110803b24a94462700bb7330ce3fd" name="gstreamer-plugins-ugly" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="db3f1680cdd6ec3dd1a24a5b6836d0f1d6ec3afd86710328ddf1b72da3b95bd2" name="gstreamer-plugins-ugly-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="41e7e065964c87a9eb2365c8f4a5bd222ea526430a19893b205ae5e22826c955" name="gstreamer-plugins-ugly-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="289145b47ab4efe1b645b0308644cdf7c5d86f870611c2e623bec58bd35b9a5e" name="gstreamer-plugins-ugly-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="bf02a89f6e6822d7c3a4737dfbd2b8358d7523e6d0a6152d51182abfa79075e9" name="gstreamer-plugins-ugly-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="a2bdb4887a098cae926dc17739b1183f6098968c8778927bb12ff89b16c900aa" name="gstreamer-plugins-ugly-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="c53c35f5c78d55363db2e782879f0f3d25ed3ae568e8a132fa446708d462e686" name="gstreamer-plugins-ugly-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="71c82b802b269f6b2501f126a6520384f8619878e802e93e69d292f52aef1539" name="gstreamer-plugins-ugly-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="42eef47a442a93b3bdc91dce919c414b8cf9ff7b6c8e9dc670869a4a80fc1c8a" name="gstreamer-plugins-ugly-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="d83832e4fb0b142458192ba8af05168324cbd3535eeb11612a48be8c5a633422" name="gstreamer-utils" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="a59101867cbdd83fa8d67a6fdf5a2e8422c6d0be1da1574473e50c8c2f38e5ca" name="gstreamer-utils" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="3816ee8312a45b036588cb5429c74bc794c7929337ffe18c4d9291efe1645d1e" name="gstreamer-utils" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="421cd1805e368c3d31f697a85d0538a2c9e1a91834af8f4d8c584aad702f1733" name="gstreamer-utils" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="0583ebda8ca94118d975bdbefebf1028b88d6fc79b5903d83e8168e3cfa352c9" name="gstreamer-utils" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="bc025bca4164e19ef138369c6d5028439d0d248a35d54b414f3ff2f4429a5cd3" name="habootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.3.11+git.1602831614.0f63599" rel="1.11.1"/>
  <changelog author="xarbulu@suse.com" date="1585310400">- Version bump 0.3.3
  * Autodetect GCP instance id and add it to the grains file
  Thu Mar  5 10:29:22 UTC 2020 - Xabier Arbulu &lt;xarbulu@suse.com&gt;
- Version bump 0.3.2
  * Add new option to configure corosync configuration file</changelog>
  <changelog author="xarbulu@suse.com" date="1587124800">- Version bump 0.3.4
  * Autodetect GCP instance name and add it to the grains file
  * Install the correct packages for the GCP resources
  (bsc#1161898, bsc#1160933)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589544000">- Version bump 0.3.5
  * Change monitoring settings</changelog>
  <changelog author="xarbulu@suse.com" date="1590062400">- Version bump 0.3.6
  * Add the option to configure the cluster properties and defaults
  * Add the option to configure the sbd resource parameters
  (bsc#1170702)</changelog>
  <changelog author="xarbulu@suse.com" date="1591272000">- Version bump 0.3.7
  * Make diskless sbd and using disks self exclusive (bsc#1172432)
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1597924800">- Version bump 0.3.8
  * Include the pillar example file in package
  (bsc#1174994)</changelog>
  <changelog author="xarbulu@suse.com" date="1599134400">- Version bump 0.3.9
  * Add lock mechanism to the cluster join process to avoid issues
  when multiple nodes are joining in parallel
  (jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1601899200">- Update the SUMA form.yml file and prevalidation state with latest changes in project</changelog>
  <changelog author="dmaiocchi@suse.com" date="1602158400">- Version bump 0.3.10
  * Improve Formula with form description (jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602763200">- Version bump 0.3.11
  * Update the prevalidation logic to check for valid sbd entries (jsc#SLE-4047)</changelog>
</package>
<package pkgid="d8f7c4c4d3f42e7707ff247f547923ab683cb18d987a108620b592c6937add6e" name="habootstrap-formula" arch="src">
  <version epoch="0" ver="0.3.11+git.1602831614.0f63599" rel="1.11.1"/>
  <changelog author="xarbulu@suse.com" date="1585310400">- Version bump 0.3.3
  * Autodetect GCP instance id and add it to the grains file
  Thu Mar  5 10:29:22 UTC 2020 - Xabier Arbulu &lt;xarbulu@suse.com&gt;
- Version bump 0.3.2
  * Add new option to configure corosync configuration file</changelog>
  <changelog author="xarbulu@suse.com" date="1587124800">- Version bump 0.3.4
  * Autodetect GCP instance name and add it to the grains file
  * Install the correct packages for the GCP resources
  (bsc#1161898, bsc#1160933)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589544000">- Version bump 0.3.5
  * Change monitoring settings</changelog>
  <changelog author="xarbulu@suse.com" date="1590062400">- Version bump 0.3.6
  * Add the option to configure the cluster properties and defaults
  * Add the option to configure the sbd resource parameters
  (bsc#1170702)</changelog>
  <changelog author="xarbulu@suse.com" date="1591272000">- Version bump 0.3.7
  * Make diskless sbd and using disks self exclusive (bsc#1172432)
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1597924800">- Version bump 0.3.8
  * Include the pillar example file in package
  (bsc#1174994)</changelog>
  <changelog author="xarbulu@suse.com" date="1599134400">- Version bump 0.3.9
  * Add lock mechanism to the cluster join process to avoid issues
  when multiple nodes are joining in parallel
  (jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1601899200">- Update the SUMA form.yml file and prevalidation state with latest changes in project</changelog>
  <changelog author="dmaiocchi@suse.com" date="1602158400">- Version bump 0.3.10
  * Improve Formula with form description (jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602763200">- Version bump 0.3.11
  * Update the prevalidation logic to check for valid sbd entries (jsc#SLE-4047)</changelog>
</package>
<package pkgid="f222d8e0b43ed2643908ce272bcb40744ea85cf5c77aa577629003ebf93d4b2a" name="hunspell" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="2defa17c9347f8636410b5d83de5d1874f623f1c162bcf4c43324f33f4f3d290" name="hunspell" arch="i586">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="751582307f832f3fb11aeed3aa594fade7dd45f475da717a77da8dbe7bb4d080" name="hunspell" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="e593fe5920eff2ad0429c0368ff2606ec3d42093913725bac5f9431162fe8959" name="hunspell" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="23d5812830b950d05fd7b0c03b0af02735733f359cc39e212d47630aab2d8ed2" name="hunspell" arch="src">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="e5a8d7ae5482cf03a95a99e6703127e6f7c68df97f75796a91b141de0d54de60" name="hunspell" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="f8b06ecb3712d22a40cb9a03010dc34c1986928b159f514978fb051352c31498" name="hunspell-devel" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="23e081fd9555f52d2e8fcad8a601f459edddbace36f4b911849e0cde572e88b7" name="hunspell-devel" arch="i586">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="6aaac0df10e0d91225a696a80b40ca6c67b4fd3cbb0ac125f0682ba1d9fb9db0" name="hunspell-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="099f67cc81fc5cf2f54ac296e37063a68036110ec9b0d260dd81f3aacd2db09c" name="hunspell-devel" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="37cdd8944371df5671e0f2657c1a63c6609ee34bcad98820cecdc0b16fe9e4c8" name="hunspell-devel" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="896690822ead03473f95f0775913b2c5c82d483ca034711657e67dc6021a0994" name="hunspell-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="3c2a72a37ba3878ada6e19e25552667c6bda6951fb944cbbab06a68a4a5ffdc0" name="hunspell-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="a9374aa6911ca5eb0032af7b6d5b466a7fea3a58d991db697a242a2b763a63e3" name="hunspell-tools" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="6e69a9f314412ec02351d23b3dbde342ba95c5b09ecdd4ef96e84114c97b82cc" name="hunspell-tools" arch="i586">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="80dbcacb137ce3ae17567a6b43e7591de79f2c25cab0ca166d31400833f57122" name="hunspell-tools" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="cd8115e621a41a7e8bb208dd0df85e7180ce555438003140bbfeb772f7876b72" name="hunspell-tools" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="409cb73473daf59b1caa6efd096df9c18eb8752ae85449fe73b6298a64ed8421" name="hunspell-tools" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="620fbaa00c63d437b42e3e2597f191ec1cc7424bfc7c339b5b4b60bd7e7cf8b0" name="ipmitool" arch="aarch64">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="41c5b085bd1a2b746b9b8d7f9eacd31f41cf4b6c14304ba8357526022b191b35" name="ipmitool" arch="i586">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="e93280b485a9e2466e15677084930ecd18dd978e498ed78615ef05f105ead029" name="ipmitool" arch="ppc64le">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="280e9889e2024c039b0bf68c8da394760b3c6bc15904c3bb52a7a2165c78d1c1" name="ipmitool" arch="s390x">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="c337b11903af1bbcd62a4b7aa75468dd076b8d3f619c3dd02b8844a2784e0220" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="3d66c9aaf297f3663f240ca400c27106271c249fdf3296cd0f67311b73f0758b" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="0f5d51a9ce40976edc52ebef32f3342d3fbe4af01ca8b52198b6cad430cc8cf5" name="ipmitool-bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="4df607a6e313b9641e624efca3d3a29a86ed1deb43a6a98e336d72d1e3dcb633" name="java-1_8_0-ibm" arch="i586">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="5a931434d8bf6b891d79327b825c6cc15373a68507cd0c656605235edd59f0d5" name="java-1_8_0-ibm" arch="src">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="c6434487877f87e4fb08f40986e366286f69fdbefbb48cbcb4342507aefb602c" name="java-1_8_0-ibm" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="4b9af49e1f8f738823704237ee244a9435bd5da0c03c1c7c5bfb9a93ea2aa3ba" name="java-1_8_0-ibm" arch="s390x">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="702a8ce4b4340cf8c5a28f9e681d37198ca1b3348164b02a6864ce4f9dc5dc4c" name="java-1_8_0-ibm" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="df7b235d9e1cb582e15df58ac049820975ad73462d007491b8cb394bc53ef3a4" name="java-1_8_0-ibm-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="2586edaee6683701cd0114ec29d96a3ed897cf4971e81d4deaef5f4be239b840" name="java-1_8_0-ibm-alsa" arch="i586">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="9c2294b1581f004dde12647d4b51dd59bf516dc0385e2a30877eb86ee5f92832" name="java-1_8_0-ibm-alsa" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="d8802c8e7cb5c4d08f477dff3ba686e99b9fa0796f73ae6740171a919ac2d7e3" name="java-1_8_0-ibm-demo" arch="i586">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="6333e14baa3c296620bcc0914b5e10f1e48ab237565d8219821b2ef0fb890cd5" name="java-1_8_0-ibm-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="87aa0c292928a9fe26de46cc867dab9039fa84afe4adce8fc1645e385d23a35f" name="java-1_8_0-ibm-demo" arch="s390x">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="188f792f5256a370a0e6fe5e54635b67cc0746d1e50f55323ef963a3af0e4ede" name="java-1_8_0-ibm-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="8ba9d1685844a167ff2bab289a13859ff39eb42be75df16e035710ab4e16c10a" name="java-1_8_0-ibm-devel" arch="i586">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="8fa85c87aba28651320c41f27ee0f96730e7d918b17729fe0dceadc91807cd9a" name="java-1_8_0-ibm-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="ebd662f9f7478ce13911269919ce80d361b592c3879ce52f0710545a00ad19e5" name="java-1_8_0-ibm-devel" arch="s390x">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="065c6373b5eb8fa427c7209a1b5808b27217b458f092b3c8bc36131f87fa99cc" name="java-1_8_0-ibm-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="2150b52071c9265d7d19213da26bc8b231e09e50ed53157936bb90c56d26e322" name="java-1_8_0-ibm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="65afcfa27516f3e719df132561eef44b98f916075cc51dc22dfad29f0f63a41f" name="java-1_8_0-ibm-plugin" arch="i586">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="bb4638d6b8adc07102ba16c390460f99cce9812044d9a7a2e28027f7b8c8ce54" name="java-1_8_0-ibm-plugin" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="3254f2defb0e5ee14ec8ce2ba31c294889b829607add13337940f219cd4dd53d" name="java-1_8_0-ibm-src" arch="i586">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="f80d75fb3314693152db1bf808af22779acfb32eedde3ac9e069a5dbbde3bd0d" name="java-1_8_0-ibm-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="740d99ac8ae52dbc8c6e12c54d5ed0233126d0d99fe8fb006b46aab6c8010972" name="java-1_8_0-ibm-src" arch="s390x">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="4edb8853cf57aecec6ebdd0ca9331785da4702a7d776bac5bfc71c97ac8c9934" name="java-1_8_0-ibm-src" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr6.16" rel="3.44.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1566561600">- Update to Java 8.0 Service Refresh 5 Fix Pack 40 [bsc#1147021]
  * Security fixes:
    CVE-2019-11772 (bsc#1147021) CVE-2019-11775 (bsc#1147021) CVE-2019-4473 (bsc#1147021)
    CVE-2019-11771 (bsc#1147021) CVE-2019-7317 (bsc#1141780) CVE-2019-2769 (bsc#1141783)
    CVE-2019-2762 (bsc#1141782) CVE-2019-2816 (bsc#1141785) CVE-2019-2766 (bsc#1141789)
    CVE-2019-2786 (bsc#1141787)
    IJ17282 IBMJCEPLUS NAME SPACE CHANGE FOR GSKIT
    IJ17055 JSSE2 MEMORY LEAK ON COM.IBM.JSSE2.EXT.ALPNJS SEEXT
    IJ17640 OPTIMIZE SHA PERFORMANCE
  * Class Libraries:
    IJ18126 JAVA.LANG.INTERNALERROR: SPAWNP FAILURE, ERRNO=3450
    IJ14454 REPLACE HARMONY IMPLEMENTATION OF JDWP WITH OPENJDK JDWP IMPLEMENTATION
    IJ18131 UPDATE TIMEZONE INFORMATION TO TZDATA2018I
  * JIT Compiler:
    IJ17054 JAVA JIT ON POWER: CRASH IN FREEBESTREGISTER()
    IJ17817 PROBLEMS CALLING NON-XPLINK NATIVE ON Z/OS 31BIT
    IJ18244 SEGMENTATION FAULT WHILE RUNNING JIT COMPILED CODE
  * ORB:
    IX90189 HANDLE SCHEMA USE-CASE SCENARIO FOR APAR IX90188
- Update to Java 8.0 Service Refresh 5 Fix Pack 37
  * Class Libraries:
    IJ16550 CP1386 CTRL CHARS COMPATIBILITY ISSUE BETWEEN JAVA AND DB2
    IJ15675 THE FONTMANAGER LIBRARY NEEDS TO BE LINKED AGAINST THE AWT HEADLESS LIBRARY
  * Java Virtual Machine:
    IJ15979 DUMP EVENT 'TRACEASSERT' (00080000) RECEIVED WHEN JNI CHECKING IS ENABLED
    IJ16376 SEGMENTATION ERROR WHEN INVOKING JNI METHOD JAVA.LANG.ACCESS.GETCONS TANTPOOL()
  * JIT Compiler:
    IJ16221 GC ASSERTION WHEN RUNNING METRONOME
    IJ16118 HANG WITH ALL THREADS WAITING
- Update to Java 8.0 Service Refresh 5 Fix Pack 36
  * JIT Compiler:
    IJ15764 CRASH DURING JIT COMPILATION
    IJ15793 CRASH DURING JIT COMPILATION
    IJ16011 INCORRECT RESULTS AFTER METHOD IS JIT COMPILED
    IJ15826 INTERMITTENT CRASH IN JAVA JIT COMPILER
  * z/OS Extentions:
    PH11921 JZOS PDS MEMBER STATISTICS THROWS AN EXCEPTION ON INVALID ISPF DATA
    PH11870 JZOS SUPPORT OF Z/OS CODE PAGES</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1569931200">- Update to Java 8.0 Service Refresh 5 Fix Pack 41 [bsc#1143080]
  * JIT compiler crash: Remove implicit sign extension assumptions
    from iRegStore evaluator (https://github.com/eclipse/omr/pull/4103)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575460800">- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
  * Security:
    IJ18632 'NO SUCH ALGORITHM: 1.2.840.113549.2.X WHILE STORING OR RETRIEVING HMACSHAX USING A PKCS12 KEY STORE
    IJ19796 ADD PIECEMEAL SHA*WITHDSA SIGNATURE CAPABILITY TO THE IBMPKCS11IMPL CRYPTO PROVIDER
    IJ19669 NULLPOINTEREXCEPTION OCCURS WHEN READING AN EMPTY PKCS12 KEYSTORE USING JAVA
    IJ19242 CERTPATH UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ18349 IBMJCE ISSUE#44 ADD PKCS12 KEYSTORE ISSUER SUBJECT KEY ID CHECKING TO CERT CHAIN PROCESSING
    IJ18830 MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL
    IJ19243 PKCS UPDATES IN SUPPORT OF THE JSSE TLS 1.3 PROTOCOL
    IJ20639 SUPPORT FOR NEW ALGORITHMS ADDED TO IBMJCEPLUS AND IBMJCEPLUSFIPS PROVIDERS
    IJ18572 UPDATE CMSPROVIDER FOR IBMJCEPLUS
    IJ18573 UPDATE IKEYMAN FOR IBMJCEPLUS, PKCS12 KEYSTORE CORRUPTED AFTER USING IKEYMAN
  * Class libraries:
    IJ21181 3 JCK CASES FAILED IN IBM I PLATFORM ABOUT AWT
    IJ15709 JAVA LAUNCHER FAILS TO LOAD IF LOADED WITH AN EXPLICIT LOADER
    IJ20939 PROBLEM WITH SECRET (SYMMETRIC) KEY ALGORITHM IN IBMJCEPLUS
    IJ20980 UPDATE TIMEZONE INFORMATION TO TZDATA2019A AND 2019B
  * Java Virtual Machine
    IJ19657 ASSERTION FAILURE FROM STANDARDACCESSBARRIER.CP P:767
    IJ20612 CRASH FROM RUNCALLINMETHOD() RELATED TO SHARED CLASSES CACHE
    IJ20908 SEGMENTATION ERROR FROM LIBJ9VM29
    IJ20395 SEGV READING DATA VIA UNSAFE.GETBYTE()
  * JIT Compiler
    IJ20311 A SIGFPE ERROR IS RAISED IN JAVA JIT COMPILED METHOD USING DATA ACCESS ACCELERATOR LIBRARY
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ19899 CRASH WHILE THROWING A CLASSCASTEXCEPTION
    IJ21225 INFINITELOOP ON STATIC FINAL FIELD MODIFICATION
    IJ18450 JAVA JIT - CRASH IN USEREGISTER() ON POWER HARDWARE
    IJ20528 NULLPOINTEREXCEPTION OR SEGMENTATION FAULT FOR METHOD CALL TO OBJECT OF A PRIMITIVE WRAPPER TYPE
  * z/OS Extentions
    PH17464 High CPU when using Elliptic Curve Ciphers (ECC) and the IBMJCECCA and IBMJSSE2 Providers
    PH19449 IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCKSIZE OF 2048</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1581076800">- Update to Java 8.0 Service Refresh 6 Fix Pack 5 [bsc#1162972, bsc#1160968]
  * Security Fixes:
    CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-2659
    CVE-2019-4732
    IJ21985 IBMJCE PROVIDER IS UNABLE TO BUILD A CERTIFICATE CHAIN
    WHEN A PKCS12 KEYSTORE HAS BOTH GOOD AND BAD INTERMEDIATE
    CERTIFICATES
    IJ21208 KDB to JKS keystore conversion creates JKS keystore with
    broken certificate chain, regression introduced in
    CMSProvider 2.63
    IJ21616 THE SECURITY PROPERTY 'JDK.CERTPATH.DISABLED ALGORITHMS' IS
    MISTAKENLY BEING USED TO FILTER JAR SIGNING ALGORITHMS
  * Class Libraries:
    IJ22359 HANG IN JAVA_JAVA_NET_SOCKETINPUTSTREAM_SOCKETREAD0 EVEN
    WHEN TIMEOUT IS SET
    IJ22350 JAVA 7 AND JAVA 8 NOT WORKING WELL WITH TRADITIONAL/SIMPLIFIED
    CHINESE EDITION OF WINDOWS CLIENT SYSTEM
    IJ22064 JAVA OUT OF MEMORY (HEAP SPACE) JAVA V8 IN Z/OS WITH
    STRINGS OR CHAR ARRAYS
    IJ22142 JAXB XML VALIDATION FAILS ON IBM JDK &gt;= 8.0.5.15
    IJ22141 PERFORMANCE ISSUE ON JAVA 8 WITH FDLIBM LIBRARY IN AIX
    IJ22351 SUN.NIO.CS.EXT.IBM1390$D ECODER OBJECTS CONSUMED JAVA HEAP
    FOR JAVA8
    IJ22337 THE NAME OF THE REPUBLIC OF BELARUS IN THE RUSSIAN LOCALE
    INCONSISTENT WITH CLDR
    IJ22349 UPDATE TIMEZONE INFORMATION TO TZDATA2019C
  * Java Virtual Machine:
    IJ20714 A SIGSEGV/GPF IS RECEIVED FROM METHOD RESIZELOA()
    IJ20379 CRASH OR ASSERTION FAILURE HAPPENED AFTER DECOMPILATION
    WHEN FSD WAS ENABLED
    IJ21959 GARBAGE COLLECTION NOTIFICATION IS NOT EMITTED
    IJ21098 IBM J9 UNBLOCKS SIGNALS BY DEFAULT
    IJ21009 INCREASED RESPONSE TIME AND HIGH CPU UNDER BALANCED GC POLICY
    IJ21925 RELAX REFERENCE ASSERT AFTER SCAVENGER CLEARING
  * JIT Compiler:
    IJ21488 CRASH DURING JIT COMPILATION
    IJ20441 CRASH IN JVM INTERPRETER AFTER OSR
    IJ20662 INCORRECT RESULTS FOR EXPRESSIONS WITH SHIFTS
    IJ21489 PERFORMANCE REGRESSION WHEN CALLING JNI ON POWER (AIX &amp; LINUX)
    IJ22219 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
    IJ22150 RUNTIME FAILURE IN THE JIT WHEN RUNNING ON Z ARCHITECTURE
  * ORB:
    IX90190 OUTOFMEMORYERROR THROWN FROM CDRREADER.READBYTESFORST RING</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Update to Java 8.0 Service Refresh 6 Fix Pack 6 [bsc#1160968]
  * Security:
    IJ22978 FIX SECURITY VULNERABILITY CVE-2020-2654
    IJ22143 JAVA.IO.IOEXCEPTION: SEQUENCE TAG ERROR THROWN WHILE
    USING CERTPATH TO VALIDATE A CERTIFICATE CHAIN
  * Class Libraries:
    IJ22726 REGRESSION IN APPLET STARTUP TIME ON IE BROSWERS
  * Java Virtual Machine:
    IJ21943 MISSING PARAMETERS TO EXCEPTION MESSAGE
  * XML:
    IJ22335 THE XSD DATATYPE GYEAR INCORRECTLY ALLOWS VALUES WITH
    LESS THAN 4 DIGITS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753600">- Update to Java 8.0 Service Refresh 6 Fix Pack 10 [bsc#1172277, bsc#1169511]
    CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800
    CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2019-2949
  * Security:
  - ADD RSA PSS SUPPORT TO IBMPKCS11IMPL
  - UPDATES TO IBMJCEPLUS AND IBMJCE
  * Java Virtual Machine:
  - ASSERTION FAILURE IN JCLEXCEPTION.C
  - FIX THE LENGTH OF THE CLASS NAME IN VERIFYING THE QUALIFIED CLASS NAME
  - MEMORY_COLLECTION_THRESH OLD_EXCEEDED NOTIFICATION FOR MEMORYPOOLMXBEAN
    IS TRIGGERED MORE THAN EXPECTED
  * JIT Compiler:
  - CRASH IN JIT COMPILED CODE ON SYSTEMZ
  - FAILURE TO COMPILE LARGE METHODS CONTAINING CALLS TO JNI ROUTINES
  - RARE CRASH READING AN ADDRESS JUST BEYOND THE END OF THE JAVA HEAP
- Update to Java 8.0 Service Refresh 6 Fix Pack 7
  * Java Virtual Machine:
  - SLOW JVM STARTUP SPEED ON A FULL SHARED CACHE
  * JIT Compiler:
  - GPF DURING COMPILATION WHILE PROCESSING CFG
  - JAVA JIT: NEW OPTION TO PREVENT ALIASING PRIMITIVE BOX CLASSES FINAL FIELDS
  - UNEXPECTED BEHAVIOUR: HASH MAP RETURNING INCORRECT HASH CODE VALUE AFTER
    CERTAIN ITERATION ON LINUX ON Z
  - UNEXPECTED NPE CAUSED BY AN INCORRECT JIT COMPILER OPTIMIZATION
  * Security:
  - KEYTOOL IS UNABLE TO LIST ALL THE CERTIFICATES IN A PKCS12 KEYSTORE IN
    CERTAIN CONDITIONS
  - NULLPOINTEREXCEPTION THROWN FROM X509CERTIMPL.GETISSUERKE YIDENTIFIER
  - WEBSPHERE FAILS TO SUCCESSFULLY VALIDATE A CERTIFICATE CHAIN USING THE
    CERTPATH SECURITY COMPONENT</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590753601">- The pack200 and unpack200 alternatives should be slaves of java [bsc#1171352]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]</changelog>
</package>
<package pkgid="0204f467307b7f9b081ed7624776c8dba648b3a85e9a55c942cd21385a1db93e" name="java-1_8_0-openj9" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="d60c157c475ef447492b2958b39585724ba63365e16d0c63bd70bab2fb2f0456" name="java-1_8_0-openj9" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="f949d1dcbe6e49b26dcb424d46abaf30ce7595302156c3845fe3fdf38bd5539f" name="java-1_8_0-openj9" arch="src">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="66ee6802721a5914f3179f9a9b124ad77fd34c056d1ea332215b143db0d6e963" name="java-1_8_0-openj9" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="885d241e3b1be84fcfa6dda31af6591ebfbc6ec514d992acf82f074d7f2a9aaa" name="java-1_8_0-openj9-accessibility" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="910713256ad4f42bb30f2f683afca5db44c0701b03921f6a208b32faa390346d" name="java-1_8_0-openj9-accessibility" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="0427c3bb29942447cd7e64a990dab636a8d9b6d6074eafc55d15eb1de8b1bf90" name="java-1_8_0-openj9-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="3da86d175655790b5dd0717d6a7374a6f57c06dc9110c4127c6b4039b39c720a" name="java-1_8_0-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="1dd07cd739fd6090fc77755aab25b71d0d33ce5be1381c778c1975d1f4bc5abd" name="java-1_8_0-openj9-demo" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="4bdf15eb332c9df5ed10dd03233d2c280aab508149e931c041765c5b8a1b9359" name="java-1_8_0-openj9-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="58c4fe5ee3169fe37d41eb5aaf490ab6912a9504c85fa374f4242cc71d2ce347" name="java-1_8_0-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="9e29b158bc05476dddb98ef1c12a314c57be49e70fca290a52442a016fa3df09" name="java-1_8_0-openj9-devel" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="4e96e7983bb39f3e6a76d0bc0eb06ffc813a3cc62efa7aa49168d60f789d1c6c" name="java-1_8_0-openj9-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="65549ef8dc49e38c065689cf75f0b69e9747aecaf09a6f9948fbb3375f149281" name="java-1_8_0-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="09395d2bc93165faef4014848c506b1caf118db4a4cbd3f88f2c511f218bb49b" name="java-1_8_0-openj9-headless" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="1ad0603492375d6281f2e75616e2ccddc49d04ab6aa8d550c391ba83edf73ee7" name="java-1_8_0-openj9-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="e893421bf6409f9bacfb9ee33a29b3c2f7356e3fcb4f25468fd2c201e1fcc45b" name="java-1_8_0-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="ff6d9eb05ea4cab91874c42b55f19fdda7b902c805dae2f91b9cf4af4e86f0b1" name="java-1_8_0-openj9-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="e4ee3a98a2efd3f543c51ad542962f3756c1344da3c53264557b4469702f5cdf" name="java-1_8_0-openj9-src" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="cc725cca886b5b2ca108177d5406deb3a91a6a607d2bcb005f444a3fc15d0a41" name="java-1_8_0-openj9-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="da8fa4114a96b61aa77fc25bcf4ed5c454bb985e3be819753af81a32621165ea" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d65a9708869f5a5208e222def27840532d6d876cfe2225e51c43399ec85f88df" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="cbc731be109460a37f38190bf59db24ad6cba7d63a967e63737f32fce6c8e968" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="a1d09dce7081fc2d3c6832593c11ed852c6393e3403b1e914fa342f267b18047" name="kernel-debug-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9e434a96e76905cee5af9e2649100896fc9c4905f34a9374aeff96132e0ffd92" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3bb61491bc973de9a1a4c81bf1e9140fadeb103a93c4f352560ae56cd1ff70b6" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="50850e7130d9c3e3849f63213809d3b05d6d12c713ee31e62e5c01cf77b70f30" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="405642d12bb002b3cbda9b9d31163859190f0b968651f17ca64e481040414321" name="kernel-debug-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="21f449642791a3df668f4fd2e283d591a32f793aa2bd8f9ba49fac16cf6275c5" name="kernel-debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="794320920f4402b66f5458af7b207f467d54b0908c48636080cbfdccd49e2ea0" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="86fa195d72408d13c8ed0e218d47702f24c5bb51c8ed7f5a2277064513b98462" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="446d926bfee871afc718e90f6be5b68fa242ebbf4abd327cc91e23b68d40020d" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1ae3ec350ed572a644a92dea2bcbc6ccae75135dd3a4154c2fcfa4d987bd5f89" name="kernel-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e66443d7d45d41932ad75ea2fde8b9b2f979f99c2c2237e8fc40c92e598a39a5" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="2dd08dd17cf79c9d05e2ce1dfb1948a0c6a875242fda07e289c45e7c77d05fa9" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="132e4c2534cd454b31ec96a0b8d342eb52915afeedc5d18f1fc7ef3d866a7492" name="kernel-default-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="453b11b8dd925ab79ffe739288cc264c932f91ac807f554895cec37ffd183303" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="ae0073c8d7972a02ad0fa797d641f08401bdab713c814e9e5f9ae2ef72ac0957" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="81f6cdc0acfb15f744e856ff12c691936a3d84568627c6c6f6d76b58735de8ad" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="22fbb90f0b279adb8f19657878610a4d2f222ad7601aa202af4caf3359f28f52" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="64ccac0052a8b2c02f4a810e851da10541f0cd26700dadc99246b258ca1e7ce6" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="c9da886a35919a7e128dd5b98f6ecdd1ba3e2a13174d270e3ac2b0ae18f36590" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="dcd605818e57fb62a2032581d3279163f3f53900c839f033ddf9975a5693ea39" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0a70d168eeb4e2a33ad8d3839bdd34da6c194a50ae278db47eaef27d5d63fb1d" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e4b356edbf70cf75d86f8bb4a99ef8713492fe7e0648f3a4d206b448c6629438" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f0079f52be192149a35029c7c866506af69282b8f3d6c7d92df44c946fde88da" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="805135026597a3afd73653b9fca108f34b4c19768921b7b7ea81a15f353d298e" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e9dd2555adef407484c05c0901ab8c97fd4a4b0b27f5961e24575485d717b8b6" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="6070cd1a79e9625facc90c168baab918b7cb861182e2ee4a0d0dab36cfe53031" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b74628de4bc743a800ac9986562214e265c5e52ce691155c6faaf17637b5fc00" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9e252ecd021b07a43e8edf4c4095fa8efe0b721fcf7f240f5930605c29efe79a" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="4e75c28477c43a3a1ea4ffd6d976d32c32585ade67e64329b414e80053c2ad18" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="41b7d3829a1a431e539052388a1830abe2e2d8f28ae8f25cfa789c74be642f80" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9a239444c99251f31450fb385f80800482189fb4d5512c3fcbb03f12b387184b" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="63abc27ccc03f06d05d46f1807d3f1af3e1e75d6ff1baa0f434307641a8ae383" name="kernel-default-man" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0a6158ed7a4c13296d98ee6f5748487a49729ebdc02dd5d65b5f166d3a89574a" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="aef96eedf884109cfb12aaa1d71d32507509f2e591299d1d0604f8c4044eeb3c" name="kernel-devel-rt" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="a8931d9df40181a27e99f10e959fec961893663d553900d7822f06b916909b7e" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.3"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="de0ddb743041d0a4fe98dcf1d22a225419c3f1ff9cded667d707458693fcf944" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.3"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="5a0be56cd7c32359ad214ddfda4f97a8ff686b98434312de8d1024d0e08a3a53" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.3"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="a15d6207981519532c468ead3d00af2db76593b986daece39294587754512c0d" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="06f5ac38efe1c5e50d8a9d4140ce2a52a71ab80e87ef5089ab593d1842f9fd4e" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="65d65a5444f07ef4b0649f39da29a6e3e3cc8558a6dfc1f740e1be8fbbb3a267" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0e4f5a287fc8ae174a8d66a16dad8e5e6443f3c6387a3afe7c0e1ad81f270cd8" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="24c33cc9f6f7356b8584cbfc1281b6208000eb01c76853ff4e3cd146804db3a3" name="kernel-kvmsmall-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f6b3bdcc9789a57f57795b84e51c4731293c9a48ffde0c0e6bc71358fa84b8b8" name="kernel-livepatch-4_12_14-150_41-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1596628800">- Fix for CVE-2019-0155 ("i915 priv esc")
  Live patch for CVE-2019-0155. Upstream commits
  25dda4dabeeb ("drm/i915/gtt: Add read only pages to gen8_pte_encode")
  250f8c8140ac ("drm/i915/gtt: Read-only pages for insert_entries on bdw+")
  c9e666880de5 ("drm/i915/gtt: Disable read-only support under GVT")
  3e977ac6179b ("drm/i915: Prevent writing into a read-only object via a
    GGTT mmap")
  0a2f661b6c21 ("drm/i915: Rename gen7 cmdparser tables")
  44157641d448 ("drm/i915: Disable Secure Batches for gen6+")
  66d8aba1cd6d ("drm/i915: Remove Master tables from cmdparser")
  311a50e76a33 ("drm/i915: Add support for mandatory cmdparsing")
  4f7af1948abc ("drm/i915: Support ro ppgtt mapped cmdparser shadow
    buffers")
  435e8fc059db ("drm/i915: Allow parsing of unsized batches")
  0f2f39758341 ("drm/i915: Add gen9 BCS cmdparsing")
  0546a29cd884 ("drm/i915/cmdparser: Use explicit goto for error paths")
  f8c08d8faee5 ("drm/i915/cmdparser: Add support for backward jumps")
  926abff21a8f ("drm/i915/cmdparser: Ignore Length operands during command
    matching")
  1d85a299c4db ("drm/i915: Lower RM timeout to avoid DSI hard hangs")
  7e34f4e4aad3 ("drm/i915/gen8+: Add RC6 CTX corruption WA")
  ea0b163b13ff ("drm/i915/cmdparser: Fix jump whitelist clearing")
  e5ee4956f2fd ("drm/i915/gtt: Revert "Disable read-only support under
    GVT")
  KLP: CVE-2019-0155
  References: bsc#1173663 CVE-2019-0155
- commit 57ce1a0</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 786be42</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit bbc34dd</changelog>
</package>
<package pkgid="0cd12fcc62b93c2541cc08a73d19b9173eb5054b7bda576f17276faa2d39931e" name="kernel-livepatch-4_12_14-150_41-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1596628800">- Fix for CVE-2019-0155 ("i915 priv esc")
  Live patch for CVE-2019-0155. Upstream commits
  25dda4dabeeb ("drm/i915/gtt: Add read only pages to gen8_pte_encode")
  250f8c8140ac ("drm/i915/gtt: Read-only pages for insert_entries on bdw+")
  c9e666880de5 ("drm/i915/gtt: Disable read-only support under GVT")
  3e977ac6179b ("drm/i915: Prevent writing into a read-only object via a
    GGTT mmap")
  0a2f661b6c21 ("drm/i915: Rename gen7 cmdparser tables")
  44157641d448 ("drm/i915: Disable Secure Batches for gen6+")
  66d8aba1cd6d ("drm/i915: Remove Master tables from cmdparser")
  311a50e76a33 ("drm/i915: Add support for mandatory cmdparsing")
  4f7af1948abc ("drm/i915: Support ro ppgtt mapped cmdparser shadow
    buffers")
  435e8fc059db ("drm/i915: Allow parsing of unsized batches")
  0f2f39758341 ("drm/i915: Add gen9 BCS cmdparsing")
  0546a29cd884 ("drm/i915/cmdparser: Use explicit goto for error paths")
  f8c08d8faee5 ("drm/i915/cmdparser: Add support for backward jumps")
  926abff21a8f ("drm/i915/cmdparser: Ignore Length operands during command
    matching")
  1d85a299c4db ("drm/i915: Lower RM timeout to avoid DSI hard hangs")
  7e34f4e4aad3 ("drm/i915/gen8+: Add RC6 CTX corruption WA")
  ea0b163b13ff ("drm/i915/cmdparser: Fix jump whitelist clearing")
  e5ee4956f2fd ("drm/i915/gtt: Revert "Disable read-only support under
    GVT")
  KLP: CVE-2019-0155
  References: bsc#1173663 CVE-2019-0155
- commit 57ce1a0</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 786be42</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit bbc34dd</changelog>
</package>
<package pkgid="80befd5f857292449232891c508f18825cf51162c7b7f66c6f7ec95bf306cf2b" name="kernel-livepatch-4_12_14-150_47-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1595246400">- Fix for CVE-2019-16746 ("buffer overflow via missing check of variable elements length in a beacon head in net/wireless/nl80211.c")
  Live patch for CVE-2019-16746. Upstream commit f88eb7c0d002 ("nl80211:
  validate beacon head").
  KLP: CVE-2019-16746
  References: bsc#1173659 CVE-2019-16746
- commit c00e2e6</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit a1b6673</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 4060ec6</changelog>
</package>
<package pkgid="26d70d8f58b7d9c1ccf41967248fb5cb11c6bff042d3f755e9e7b9e2b931cef9" name="kernel-livepatch-4_12_14-150_47-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1595246400">- Fix for CVE-2019-16746 ("buffer overflow via missing check of variable elements length in a beacon head in net/wireless/nl80211.c")
  Live patch for CVE-2019-16746. Upstream commit f88eb7c0d002 ("nl80211:
  validate beacon head").
  KLP: CVE-2019-16746
  References: bsc#1173659 CVE-2019-16746
- commit c00e2e6</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit a1b6673</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 4060ec6</changelog>
</package>
<package pkgid="8fb6032ccd084cccd3d6ee189789f8bb98b584f5c3319d75fcb6e1432fc613be" name="kernel-livepatch-4_12_14-150_52-default" arch="ppc64le">
  <version epoch="0" ver="3" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1595246400">- Fix for CVE-2019-16746 ("buffer overflow via missing check of variable elements length in a beacon head in net/wireless/nl80211.c")
  Live patch for CVE-2019-16746. Upstream commit f88eb7c0d002 ("nl80211:
  validate beacon head").
  KLP: CVE-2019-16746
  References: bsc#1173659 CVE-2019-16746
- commit c00e2e6</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 8c216e6</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 38e9c81</changelog>
</package>
<package pkgid="d964f5dbb23c28ce3d03e7dbdcb0bea16ee7c7591cb9e5a28c5dd286a723f787" name="kernel-livepatch-4_12_14-150_52-default" arch="x86_64">
  <version epoch="0" ver="3" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1595246400">- Fix for CVE-2019-16746 ("buffer overflow via missing check of variable elements length in a beacon head in net/wireless/nl80211.c")
  Live patch for CVE-2019-16746. Upstream commit f88eb7c0d002 ("nl80211:
  validate beacon head").
  KLP: CVE-2019-16746
  References: bsc#1173659 CVE-2019-16746
- commit c00e2e6</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 8c216e6</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 38e9c81</changelog>
</package>
<package pkgid="0d4913697f86b59aa707ddcd9164670e2adf5b3a1c9d31afacfbf52af4b84712" name="kernel-livepatch-4_12_14-150_55-default" arch="ppc64le">
  <version epoch="0" ver="3" rel="2.1"/>
  <changelog author="nstange@suse.de" date="1595764800">- New branch for SLE15_Update_19
- commit 5a2eedb</changelog>
  <changelog author="mbenes@suse.cz" date="1596024000">- Update IBS_PROJECT to correct maintenance incident after initial submission
- commit fa0a23e</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 75ab15f</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit de95fa3</changelog>
</package>
<package pkgid="8d6cf995f4c0592e7eab79e1887e10bbb4acfaeb8442144cee5635a71c29fdc8" name="kernel-livepatch-4_12_14-150_55-default" arch="x86_64">
  <version epoch="0" ver="3" rel="2.1"/>
  <changelog author="nstange@suse.de" date="1595764800">- New branch for SLE15_Update_19
- commit 5a2eedb</changelog>
  <changelog author="mbenes@suse.cz" date="1596024000">- Update IBS_PROJECT to correct maintenance incident after initial submission
- commit fa0a23e</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 75ab15f</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit de95fa3</changelog>
</package>
<package pkgid="18aefb5835b9ea4d4b194e573dd2e9d6b533ac2802bfe23e49f7c7afd14b10da" name="kernel-livepatch-4_12_14-150_58-default" arch="ppc64le">
  <version epoch="0" ver="2" rel="2.1"/>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1594728000">- Fix for CVE-2020-11668 ("malicious USB device pretending to be Xirlink camera can corrupt random kernel memory")
  Live patch for CVE-2020-11668. Upstream commit a246b4d54770 ("media:
  xirlink_cit: add missing descriptor sanity checks").
  KLP: CVE-2020-11668
  References: bsc#1173942 CVE-2020-11668
- commit 56f80d5</changelog>
  <changelog author="nstange@suse.de" date="1599220800">- New branch for SLE15_Update_20
- commit 55f9ac8</changelog>
  <changelog author="mbenes@suse.cz" date="1599566400">- Update IBS_PROJECT to correct maintenance incident after initial submission
- commit b07afa2</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 3789ecb</changelog>
</package>
<package pkgid="55fd4a6a1d7b5ffe542c32204d0159377d03c2617a7121f1ba6e377214c3fb1a" name="kernel-livepatch-4_12_14-150_58-default" arch="x86_64">
  <version epoch="0" ver="2" rel="2.1"/>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1594728000">- Fix for CVE-2020-11668 ("malicious USB device pretending to be Xirlink camera can corrupt random kernel memory")
  Live patch for CVE-2020-11668. Upstream commit a246b4d54770 ("media:
  xirlink_cit: add missing descriptor sanity checks").
  KLP: CVE-2020-11668
  References: bsc#1173942 CVE-2020-11668
- commit 56f80d5</changelog>
  <changelog author="nstange@suse.de" date="1599220800">- New branch for SLE15_Update_20
- commit 55f9ac8</changelog>
  <changelog author="mbenes@suse.cz" date="1599566400">- Update IBS_PROJECT to correct maintenance incident after initial submission
- commit b07afa2</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 3789ecb</changelog>
</package>
<package pkgid="64a55f85034405f7bcdbfaac21a26eb6c976df0db615ef295656a595ff0dce72" name="kernel-livepatch-4_12_14-197_45-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 255f4dc</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d55cda</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8fa3ebb</changelog>
</package>
<package pkgid="2a15e7b6f08511c075e699259c8ccd3227d4cf87e79c261d42ff486dbcba7841" name="kernel-livepatch-4_12_14-197_45-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 255f4dc</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d55cda</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8fa3ebb</changelog>
</package>
<package pkgid="b66672964442cc0c4a82f5d7864f8fcfcb660ec06d7ea3ecc540982887174e56" name="kernel-livepatch-4_12_14-197_48-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6a705f2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit dd9b8d9</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2719aaf</changelog>
</package>
<package pkgid="93411f548418a4a1ac497b9435d310e545ee2c3024817bc70b24a92ead5d7ee1" name="kernel-livepatch-4_12_14-197_48-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6a705f2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit dd9b8d9</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2719aaf</changelog>
</package>
<package pkgid="dc9ab0c8af1dde76eed11c1f8b454c2af20da0d962f895a1f99f2f3a6aaa1d94" name="kernel-livepatch-4_12_14-197_51-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 5101c3b</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 18d701b</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 7599ceb</changelog>
</package>
<package pkgid="3862e28530b44cc82cf42928aeb6e0f94d38d4b6e49ee6fb705a7438f0b06396" name="kernel-livepatch-4_12_14-197_51-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 5101c3b</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 18d701b</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 7599ceb</changelog>
</package>
<package pkgid="3b88e23693952f58d164eac7c5de5242796e07dcf069b69e01214cf1b03f76c1" name="kernel-livepatch-4_12_14-197_56-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 00a504d</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 592c03d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 57935fb</changelog>
</package>
<package pkgid="ff217d23e709c7b2e56b5de7b1f6f2686d7ea51817757139d8800b27bf62fd39" name="kernel-livepatch-4_12_14-197_56-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 00a504d</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 592c03d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 57935fb</changelog>
</package>
<package pkgid="5752ea5b1a5f8068f8a28c72b308aa832431353c51a8cb9e44fb72e915a19e56" name="kernel-livepatch-4_12_14-197_61-default" arch="ppc64le">
  <version epoch="0" ver="8" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6ff3b29</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d6dc3d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 32bac67</changelog>
</package>
<package pkgid="d98d85ef3a981a1016c865fdb7ffb2b02f4f1c828ce0d9aeb5508547dbe46d3c" name="kernel-livepatch-4_12_14-197_61-default" arch="x86_64">
  <version epoch="0" ver="8" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6ff3b29</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d6dc3d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 32bac67</changelog>
</package>
<package pkgid="cf24e1aac064fd8354102a9154a11757f3f59996a78931702248c857f2c5e2cf" name="kernel-livepatch-4_12_14-197_64-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b6f5ed2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 5fb4b90</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ffb7a09</changelog>
</package>
<package pkgid="f73d7d74803248c15f7dd83fd65026293581f32f31313c8d48dbf968f3678862" name="kernel-livepatch-4_12_14-197_64-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b6f5ed2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 5fb4b90</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ffb7a09</changelog>
</package>
<package pkgid="9fb5cdbfc2db5a38fb8c920aad8f29615754310764b9e109eab62834209f2e2e" name="kernel-livepatch-4_12_14-197_67-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit cca33e3</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 6381c79</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8cfc48a</changelog>
</package>
<package pkgid="b4a28b03a1db97c06c8d3bb73d19ce9cac3d221e0b1b45ec8853ffbdc71b0a75" name="kernel-livepatch-4_12_14-197_67-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit cca33e3</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 6381c79</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8cfc48a</changelog>
</package>
<package pkgid="6cc10e88c4ba7ca682636d40f4a6a95a60c52b2c43425ad12b915f9078aa81cd" name="kernel-livepatch-4_12_14-197_72-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b544b47</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 715bd6d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 769ffa1</changelog>
</package>
<package pkgid="6e816b253d22e7a5d0add6a47a131cc031f4a2f8cebe607ab9e426dfea0951a3" name="kernel-livepatch-4_12_14-197_72-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b544b47</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 715bd6d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 769ffa1</changelog>
</package>
<package pkgid="0baa81ed26b9ec6bdd5531fe3720218547dec9c297b556e9d77aceb5a8ffeb55" name="kernel-livepatch-4_12_14-197_75-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8c16507</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 1bee95a</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 024bb09</changelog>
</package>
<package pkgid="fc263b4017d9dfdd62d7d27cecdde5a951fcc29ca8c9e03d2304237ac2e0840d" name="kernel-livepatch-4_12_14-197_75-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8c16507</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 1bee95a</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 024bb09</changelog>
</package>
<package pkgid="ec2d9ca3080d466dc78af1e605fc945cbb3b12bc33d68f94805b3d81943ea71b" name="kernel-livepatch-4_12_14-197_78-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 137f755</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 0104b4d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a08751f</changelog>
</package>
<package pkgid="69a6cff41e1ecbb9a930ae736d941604dfd0c68593212fb68d88ea231bfa4abb" name="kernel-livepatch-4_12_14-197_78-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 137f755</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 0104b4d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a08751f</changelog>
</package>
<package pkgid="215075f3c526241eb47a1c53233ab49a6027f19e6ed2879d0eb98f84bd61d1cd" name="kernel-livepatch-4_12_14-197_83-default" arch="ppc64le">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit d19f8a8</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 72286e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 323558f</changelog>
</package>
<package pkgid="097852b9645ddc70bd743c8d4381250cfb9a5163b7964a6927c7ccaa12c9180d" name="kernel-livepatch-4_12_14-197_83-default" arch="x86_64">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit d19f8a8</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 72286e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 323558f</changelog>
</package>
<package pkgid="d7534fe975ad5f59d69acdc01a98cebed73cfa9fbf6810fac2741b2905184db1" name="kernel-livepatch-4_12_14-197_86-default" arch="ppc64le">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 93a6a0e</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f5defbb</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 115d5ac</changelog>
</package>
<package pkgid="5e68d8fb408cbd1e42bc45cb5e1995370dc3926c6fd87cea1b0b3275b6e1540d" name="kernel-livepatch-4_12_14-197_86-default" arch="x86_64">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 93a6a0e</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f5defbb</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 115d5ac</changelog>
</package>
<package pkgid="807349346a32e81934a772106ac94676aa75592bfbfea499142fb1affb23bb06" name="kernel-livepatch-4_12_14-197_89-default" arch="ppc64le">
  <version epoch="0" ver="1" rel="3.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- New branch for SLE15-SP1_Update_24
- commit 223f4c1</changelog>
</package>
<package pkgid="72e219e20e91b6a778ea3f4a6429f761f482f25c39ae101b488defba15f17a32" name="kernel-livepatch-4_12_14-197_89-default" arch="x86_64">
  <version epoch="0" ver="1" rel="3.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- New branch for SLE15-SP1_Update_24
- commit 223f4c1</changelog>
</package>
<package pkgid="3951a80624afd983796fe4b29bb9bb8a11c101ffc6b6738f458951fb0a32e863" name="kernel-livepatch-5_3_18-22-default" arch="ppc64le">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="615eca47a3112183fb89deecf5ebc9b49b0ec4df7b53777c9dd205ebcbd05f8f" name="kernel-livepatch-5_3_18-22-default" arch="s390x">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="5f7de8897533403639ab9816024e96ccd50775ca3b26c5a1e836faa5da4f39cc" name="kernel-livepatch-5_3_18-22-default" arch="x86_64">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="450ee63b1652ca7729b42713fa93da36ca7125e56956f4b28e56a43a145280e4" name="kernel-livepatch-5_3_18-22-preempt" arch="x86_64">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="a7f3f439acd97ac2efd8a7edd2bdf8323b17a56f8c1aa342080fd6925bedf18b" name="kernel-livepatch-5_3_18-24_12-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="0d5d0d494b4ce225f71c3db67cf29db4f7417ae019ba8a1a48d0bad389bb5c9e" name="kernel-livepatch-5_3_18-24_12-default" arch="s390x">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="558e2cc98591f35ef1ad2f1d4b80fc149343328aa84fb9187663ec54e5aa5fe1" name="kernel-livepatch-5_3_18-24_12-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="522677e4e9875199be928afce2b105961f0e7f84eb0cdafaf88bd9035b4aeed0" name="kernel-livepatch-5_3_18-24_12-preempt" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="8d530b7b4f24e1232ca1b75429b508723574bf0bd14ff6c6e84276a459c06a4a" name="kernel-livepatch-5_3_18-24_15-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="aeb9ce4d50e21dcf71459baeaf19e01a1b63f5389b310b05a3d83a3d2f435c7f" name="kernel-livepatch-5_3_18-24_15-default" arch="s390x">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="892441dc5ee9194e838cc0dcb2db705451bfb4dd1278f837bd10817fe0111656" name="kernel-livepatch-5_3_18-24_15-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="875a7e2db86cf96beaf5d5ac38fcb303252eda21f2ae747863b9584c59751aa6" name="kernel-livepatch-5_3_18-24_15-preempt" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="256de684460493425153938793b84556c4ca19ca72f80ee18e73de3700e5cb12" name="kernel-livepatch-5_3_18-24_24-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="b2a0740f41a275ba1803aa25e92a5d652e50aaf5e7b8a6f797f09c9b18c413bf" name="kernel-livepatch-5_3_18-24_24-default" arch="s390x">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="71ac40fd3a9c916415c14b18615165846d9a27d4a6a113822a240760adda45ab" name="kernel-livepatch-5_3_18-24_24-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="6ca4307cbaf2d4c60bcb326dde0e2eba2629f03b2bbaf95dc08db72283137f41" name="kernel-livepatch-5_3_18-24_24-preempt" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="dfe422579a1a0c3d6444ccc27c3485ddccabc10069c3e03a18d15c393edc5767" name="kernel-livepatch-5_3_18-24_29-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="35d9d7826a6a7c0c04eefa677b772a8a1ee1845029bdae26df14c62e08473f47" name="kernel-livepatch-5_3_18-24_29-default" arch="s390x">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="fc8712daabac114a7c36d5bde9cc316f41c9c2afab00af436c0474ce25579d7e" name="kernel-livepatch-5_3_18-24_29-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="247e52f154874c3cf7a8e0a23a581f166af04ff59b85fb273daf583929943b36" name="kernel-livepatch-5_3_18-24_29-preempt" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="989e85994a44e9b905314f4d1b04160387618300d38e5b257da60bd7f00b9b4b" name="kernel-livepatch-5_3_18-24_34-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="79195f393d9566a6a8076f6aca54655fd91e16cb23579d04031ef7a3628766f7" name="kernel-livepatch-5_3_18-24_34-default" arch="s390x">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="a121003f8e1b9bbe8a5410c01c4a53733c20477b1c6350b8b3ab15cb110b356c" name="kernel-livepatch-5_3_18-24_34-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="5fceb701010ce620019194484cde48babe0f10c81f48677c5d99706b756bbdb0" name="kernel-livepatch-5_3_18-24_34-preempt" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="622a24ced4a013cc4bcfd89312b6c260376a41b93dc84e36a61d3d4680fd1550" name="kernel-livepatch-5_3_18-24_37-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="6001d864599d2f44f33c767d4056e40f49e0f899439e46afac447fbec7e81db6" name="kernel-livepatch-5_3_18-24_37-default" arch="s390x">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="2bdbf04b5c131e84c357b2f2ab33f84f84116a29a0925a23d570c5ad2e1b375f" name="kernel-livepatch-5_3_18-24_37-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="ed83f7f3ec0b129fbc511ef62a476709e9b7a9f14dc96a76a095872fa0a57f7b" name="kernel-livepatch-5_3_18-24_37-preempt" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="71026f9a270add652058212e3931975fefb4cb0f278be3172147ce91a1a58954" name="kernel-livepatch-5_3_18-24_43-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="1f83714fc8e8e8962340c007b41aa6b82b80b240d266589a9a9403ce670bd7d5" name="kernel-livepatch-5_3_18-24_43-default" arch="s390x">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="bcd1d3d6fc8e247192db47e54ca954553f571bbe21b5bbc9c38b48f952416312" name="kernel-livepatch-5_3_18-24_43-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="c1534769ecda8a388273b99e34ecdcbc8e7b2be3647254a71b4a6cd22e1be92a" name="kernel-livepatch-5_3_18-24_43-preempt" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="abfa4df1eeedaddbf189755439012aad36b8097d7266eefcdfd76136418f01b4" name="kernel-livepatch-5_3_18-24_46-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="80ca86b06b10509f86c4bd9097374e6438594650c70405823d928021711a399c" name="kernel-livepatch-5_3_18-24_46-default" arch="s390x">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="6cb99163dcdd51b211002f6ada474eaba708b06e9c8ce7e29175a558afe926cd" name="kernel-livepatch-5_3_18-24_46-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="7bd93510f08aa0dfbcd40580630769862206d424de5528061498d9e34e2a7da0" name="kernel-livepatch-5_3_18-24_46-preempt" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="d11fc71703e1fa8dd302248b941a12e0fd7795a2035dc5083acd784df555844b" name="kernel-livepatch-5_3_18-24_49-default" arch="ppc64le">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="8ab23529033b799421167a21a6262807497ec4834f57e66f1c00a76fd1e0f3ba" name="kernel-livepatch-5_3_18-24_49-default" arch="s390x">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="1c3aeaf808b23e0129b73fbd34a83a8897b692075f8b880c616adf5678430676" name="kernel-livepatch-5_3_18-24_49-default" arch="x86_64">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="9035324958b28cd7ead2a5dcacd2bf36744b6eb5bc110536f84c3c1df043648c" name="kernel-livepatch-5_3_18-24_49-preempt" arch="x86_64">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="9c9284346dfea05c779aa39c1961fe91c891d2bf2fc1bddb4f7a1ee3bdf51e01" name="kernel-livepatch-5_3_18-24_52-default" arch="ppc64le">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="4f038f66966a512f96f08faa2269ea0d6d714d3d292059a1e7ba620929df8a42" name="kernel-livepatch-5_3_18-24_52-default" arch="s390x">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="24ce4b2f9aa008378b85868eb3ffb19f87f4b2bb04a8d853146f85d09e342136" name="kernel-livepatch-5_3_18-24_52-default" arch="x86_64">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="ec75b7b6b10dbbba6d5b0ae8b885ecdc88652c34bd74492b6ec042c5576ffa11" name="kernel-livepatch-5_3_18-24_52-preempt" arch="x86_64">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="996175369f178b62c584d9ae91f43be298c744498d09576d1a6e468342a09f6a" name="kernel-livepatch-5_3_18-24_9-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="0141ba36a7944e3d7d3e17236344e857fab01604107b60e0ee9d926f4ae99ab8" name="kernel-livepatch-5_3_18-24_9-default" arch="s390x">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="b5a8e97ecd9ae2382eb60b0cc6d47d6bea51f1db68a37b5b63365e42b4adcce2" name="kernel-livepatch-5_3_18-24_9-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="082526d7cfeec5e05aae5d765455719af6aa36f9a6bf49b17975fc4f164d1376" name="kernel-livepatch-5_3_18-24_9-preempt" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="8a5187b21c98188164fbe009caac6c14678827283bbfe9806afceaa7e4f4cd6d" name="kernel-livepatch-SLE15-SP1_Update_12" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 255f4dc</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d55cda</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8fa3ebb</changelog>
</package>
<package pkgid="e2254ab09d7447c6f658461c4f8a13ab499171057b80a0bca9eefac3d137dc1b" name="kernel-livepatch-SLE15-SP1_Update_13" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6a705f2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit dd9b8d9</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2719aaf</changelog>
</package>
<package pkgid="25370da8a013113053f5983b89ef78549fd16c5e6a17153eb4b9f07ec23e59b9" name="kernel-livepatch-SLE15-SP1_Update_14" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 5101c3b</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 18d701b</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 7599ceb</changelog>
</package>
<package pkgid="404183c41f6c525c02bffddb0a1c452db9712c02e5cca8b24f2ff5cffa8d79e0" name="kernel-livepatch-SLE15-SP1_Update_15" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 00a504d</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 592c03d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 57935fb</changelog>
</package>
<package pkgid="25e933c8d2a6f3f28c5b45dcd6d8d20ea65209b536733dfb6dc2bb0423eee7cb" name="kernel-livepatch-SLE15-SP1_Update_16" arch="src">
  <version epoch="0" ver="8" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6ff3b29</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d6dc3d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 32bac67</changelog>
</package>
<package pkgid="4cc01a47e24c9d53c54a446542195cf8d44b868cadf037699add5dc25b04520e" name="kernel-livepatch-SLE15-SP1_Update_17" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b6f5ed2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 5fb4b90</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ffb7a09</changelog>
</package>
<package pkgid="d48fbb0bb7df46df32ffaef7ece2f2f1e88368d69db662b96eb7a1dd011eaad4" name="kernel-livepatch-SLE15-SP1_Update_18" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit cca33e3</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 6381c79</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8cfc48a</changelog>
</package>
<package pkgid="58406e384e6d4ec54cfc172aaa360f0d46d2bef76dfc9a206d53a4c3cacbc109" name="kernel-livepatch-SLE15-SP1_Update_19" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b544b47</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 715bd6d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 769ffa1</changelog>
</package>
<package pkgid="a744dadd054a842d38d9a25712cae4d8e87475ffb964bfe59774204db8257156" name="kernel-livepatch-SLE15-SP1_Update_20" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8c16507</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 1bee95a</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 024bb09</changelog>
</package>
<package pkgid="3dabd733db1a17ecf92894acff4ab85588f62ec1301410db76e369b1c4361ee3" name="kernel-livepatch-SLE15-SP1_Update_21" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 137f755</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 0104b4d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a08751f</changelog>
</package>
<package pkgid="5043aa244948fcbfd34d1aa96ff7f1894bc8597909b9b6546b844f7a6c5a00dd" name="kernel-livepatch-SLE15-SP1_Update_22" arch="src">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit d19f8a8</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 72286e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 323558f</changelog>
</package>
<package pkgid="7322009b4aba04229366d2281d36977a4fbff15529bb0fe8367788bce6408454" name="kernel-livepatch-SLE15-SP1_Update_23" arch="src">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 93a6a0e</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f5defbb</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 115d5ac</changelog>
</package>
<package pkgid="05c79d0fa9aca47a2b37e95c78b64cdb41f7f65240174ed2d6a71d00746e745d" name="kernel-livepatch-SLE15-SP1_Update_24" arch="src">
  <version epoch="0" ver="1" rel="3.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- New branch for SLE15-SP1_Update_24
- commit 223f4c1</changelog>
</package>
<package pkgid="d18cec339bb4ad3fffa56e076e2bac351cd5f335e619aa79fb0cd4f5751bb4c8" name="kernel-livepatch-SLE15-SP2_Update_0" arch="src">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="974ca66e4639f97964edcf31c6167c01ced3c5db861df10f08c96d8ae78e2506" name="kernel-livepatch-SLE15-SP2_Update_1" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="edeba77c983ddce86f7d1fd51a1feb9da1c94227e63b6eacc32242445120c5b6" name="kernel-livepatch-SLE15-SP2_Update_10" arch="src">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="29587ec0f3e2f0b027f56df1a6eae00f4d802a9920ac1ee5029df2a94793e6c0" name="kernel-livepatch-SLE15-SP2_Update_11" arch="src">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="09596d5dc9bbfd736f0e66ba2848b6b55956ecfc58765fdce96f1f3e602077fb" name="kernel-livepatch-SLE15-SP2_Update_2" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="96bb63ff2b571d00e5e1eab139edd201d62954d3dd1abb46c5b0e2f1d520d0ed" name="kernel-livepatch-SLE15-SP2_Update_3" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="aba396996816f57eeee815e8ac023115f115ee0b38b9eaa29a778553dee6e528" name="kernel-livepatch-SLE15-SP2_Update_4" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="7002d92fbe9b36161d0a9c1b6521479bf627841cf0514a28dbf9de7d1ecbd25e" name="kernel-livepatch-SLE15-SP2_Update_5" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="6944bd8b60c2ca7290d781444232a652fd3b92b19006ad912d8b5f99e6ad028a" name="kernel-livepatch-SLE15-SP2_Update_6" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="75df218b73f6eb441eeb9f2615d27fb2952b6be07cd840703f7c6a301ef89b26" name="kernel-livepatch-SLE15-SP2_Update_7" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="9046610da3a778a720f8ca5736bd0b232c7442c061c46772331c52b13e89b733" name="kernel-livepatch-SLE15-SP2_Update_8" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="f112ebe809054cff61663c55490afd9e10564e1b13393b7e87d48da023516375" name="kernel-livepatch-SLE15-SP2_Update_9" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="f069afad194dc6e3e66f59a082a502281175ad29ddadd04108f1299e4e8a6c71" name="kernel-livepatch-SLE15_Update_16" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1596628800">- Fix for CVE-2019-0155 ("i915 priv esc")
  Live patch for CVE-2019-0155. Upstream commits
  25dda4dabeeb ("drm/i915/gtt: Add read only pages to gen8_pte_encode")
  250f8c8140ac ("drm/i915/gtt: Read-only pages for insert_entries on bdw+")
  c9e666880de5 ("drm/i915/gtt: Disable read-only support under GVT")
  3e977ac6179b ("drm/i915: Prevent writing into a read-only object via a
    GGTT mmap")
  0a2f661b6c21 ("drm/i915: Rename gen7 cmdparser tables")
  44157641d448 ("drm/i915: Disable Secure Batches for gen6+")
  66d8aba1cd6d ("drm/i915: Remove Master tables from cmdparser")
  311a50e76a33 ("drm/i915: Add support for mandatory cmdparsing")
  4f7af1948abc ("drm/i915: Support ro ppgtt mapped cmdparser shadow
    buffers")
  435e8fc059db ("drm/i915: Allow parsing of unsized batches")
  0f2f39758341 ("drm/i915: Add gen9 BCS cmdparsing")
  0546a29cd884 ("drm/i915/cmdparser: Use explicit goto for error paths")
  f8c08d8faee5 ("drm/i915/cmdparser: Add support for backward jumps")
  926abff21a8f ("drm/i915/cmdparser: Ignore Length operands during command
    matching")
  1d85a299c4db ("drm/i915: Lower RM timeout to avoid DSI hard hangs")
  7e34f4e4aad3 ("drm/i915/gen8+: Add RC6 CTX corruption WA")
  ea0b163b13ff ("drm/i915/cmdparser: Fix jump whitelist clearing")
  e5ee4956f2fd ("drm/i915/gtt: Revert "Disable read-only support under
    GVT")
  KLP: CVE-2019-0155
  References: bsc#1173663 CVE-2019-0155
- commit 57ce1a0</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 786be42</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit bbc34dd</changelog>
</package>
<package pkgid="03be0918913f7603c6dc4474f4819975a4d67cc979d1113741ffa278a5162952" name="kernel-livepatch-SLE15_Update_17" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1595246400">- Fix for CVE-2019-16746 ("buffer overflow via missing check of variable elements length in a beacon head in net/wireless/nl80211.c")
  Live patch for CVE-2019-16746. Upstream commit f88eb7c0d002 ("nl80211:
  validate beacon head").
  KLP: CVE-2019-16746
  References: bsc#1173659 CVE-2019-16746
- commit c00e2e6</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit a1b6673</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 4060ec6</changelog>
</package>
<package pkgid="2e44b3a993d3589efedd95effab87c0d6d17bc85f8f8097dc941df0898dcde95" name="kernel-livepatch-SLE15_Update_18" arch="src">
  <version epoch="0" ver="3" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1595246400">- Fix for CVE-2019-16746 ("buffer overflow via missing check of variable elements length in a beacon head in net/wireless/nl80211.c")
  Live patch for CVE-2019-16746. Upstream commit f88eb7c0d002 ("nl80211:
  validate beacon head").
  KLP: CVE-2019-16746
  References: bsc#1173659 CVE-2019-16746
- commit c00e2e6</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-15780 ("lockdown bypass for loading unsigned modules using ACPI table injection")
  Live patch for CVE-2020-15780. Upstream commit 75b0cea7bf30 ("ACPI:
  configfs: Disallow loading ACPI tables when locked down").
  KLP: CVE-2020-15780
  References: bsc#1174186 CVE-2020-15780
- commit 065a2c9</changelog>
  <changelog author="nstange@suse.de" date="1596715201">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 8c216e6</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 38e9c81</changelog>
</package>
<package pkgid="858aed37c3e0c7e96fa6a6fe1340d603fcf33c6e72c95ccdf8fe4681d3f6555c" name="kernel-livepatch-SLE15_Update_19" arch="src">
  <version epoch="0" ver="3" rel="2.1"/>
  <changelog author="nstange@suse.de" date="1595764800">- New branch for SLE15_Update_19
- commit 5a2eedb</changelog>
  <changelog author="mbenes@suse.cz" date="1596024000">- Update IBS_PROJECT to correct maintenance incident after initial submission
- commit fa0a23e</changelog>
  <changelog author="nstange@suse.de" date="1596715200">- Fix for CVE-2020-14331 ("buffer over write in vgacon_scroll")
  Live patch for CVE-2020-14331. No upstream commit yet.
  KLP: CVE-2020-14331
  References: bsc#1174247 CVE-2020-14331
- commit eda4b2a</changelog>
  <changelog author="nstange@suse.de" date="1598270400">- Bump up the version number in spec file
- commit 75ab15f</changelog>
  <changelog author="nstange@suse.de" date="1600776000">- Fix for CVE-2020-24394 ("umask not applied on filesystem without ACL support")
  Live patch for CVE-2020-24394. Upstream commit 22cf8419f131 ("nfsd: apply
  umask on fs without ACL support").
  KLP: CVE-2020-24394
  References: bsc#1175992 CVE-2020-24394
- commit 26fd005</changelog>
  <changelog author="nstange@suse.de" date="1600862400">- Fix for CVE-2020-14386 ("local privilege escalation via memory corruption in net/packet/af_packet.c")
  Live patch for CVE-2020-14386. Upstream commit acf69c946233 ("net/packet:
  fix overflow in tpacket_rcv").
  KLP: CVE-2020-14386
  References: bsc#1176072 CVE-2020-14386
- commit 58bbcce</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit de95fa3</changelog>
</package>
<package pkgid="7d93883528d67b06ade8f2b4165bc79421dc1141797c8874c3a9116bdda97757" name="kernel-livepatch-SLE15_Update_20" arch="src">
  <version epoch="0" ver="2" rel="2.1"/>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1594728000">- Fix for CVE-2020-11668 ("malicious USB device pretending to be Xirlink camera can corrupt random kernel memory")
  Live patch for CVE-2020-11668. Upstream commit a246b4d54770 ("media:
  xirlink_cit: add missing descriptor sanity checks").
  KLP: CVE-2020-11668
  References: bsc#1173942 CVE-2020-11668
- commit 56f80d5</changelog>
  <changelog author="nstange@suse.de" date="1599220800">- New branch for SLE15_Update_20
- commit 55f9ac8</changelog>
  <changelog author="mbenes@suse.cz" date="1599566400">- Update IBS_PROJECT to correct maintenance incident after initial submission
- commit b07afa2</changelog>
  <changelog author="nstange@suse.de" date="1600948800">- Fix for CVE-2020-25212 ("TOCTOU mismatch in the NFS client code")
  Live patch for CVE-2020-25212. Upstream commit b4487b935452 ("nfs: Fix
  getxattr kernel panic and memory overflow").
  KLP: CVE-2020-25212
  References: bsc#1176382 CVE-2020-25212
- commit 42ff371</changelog>
  <changelog author="nstange@suse.de" date="1601035200">- Fix for CVE-2020-0431 ("possible out of bounds write in kbd_keycode of keyboard.c")
  Live patch for CVE-2020-0431. Upstream commit 4f3882177240 ("HID:
  hid-input: clear unmapped usages").
  KLP: CVE-2020-0431
  References: bsc#1176896 CVE-2020-0431
- commit e2ba12a</changelog>
  <changelog author="nstange@suse.de" date="1601380800">- Fix for CVE-2020-14381 ("referencing inode of removed superblock in get_futex_key() causes UAF")
  Live patch for CVE-2020-14381. Upstream commit 8019ad13ef7f ("futex: Fix
  inode life-time issue").
  KLP: CVE-2020-14381
  References: bsc#1176012 CVE-2020-14381
- commit 11a51ee</changelog>
  <changelog author="nstange@suse.de" date="1603800000">- Bump up the version number in spec file
- commit 3789ecb</changelog>
</package>
<package pkgid="dfa7c811be5ff1f46231e5e01cee30a5c101f9cbe1f978f2135ef6b9a83070e4" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bdf22b28bf6fc671dd36781aeb53e2f19ab6fc9dfc362d14bc204f07745e2c1b" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d959149d5d01a7fae06cdf24b9c9c5af979b14bbd1fb07e5c129a5b84c7c6194" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1c3da275a19640c63b6c743f1a510e6d72bb30659042273ef189647730b6e4f9" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f7897de6edca72b04467e2cf35d8015d7a46633f3c319b4e23c1a72ae8c62f30" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="daa75327aff4d1b498d2c4292142ec836aede0789d3fe30daa1bd50d2ec0c16a" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b2a4cbcc5bdc6d171689c56956b83c5a7c73ce77006daa07ba0e0cb2356359a9" name="kernel-obs-qa" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="66aa435f9722f0bb83ea7ffa9cb4f593fcd6dd7d4d08bdef73c9f083958c0cdf" name="kernel-obs-qa" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e97314795bd574188944ef73ba40935da7494402ef7d8fc7e8c71d9b8b6781d4" name="kernel-obs-qa" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f44545d984818865f5506a486d42f95f78cf4f72e4fbb0180a740d1f62694b9f" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3a95090516a239d5c3de30b45354d0977b6836b344cfd5d6d26c7372e85405ba" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="a9b78743574b133a3aea5a2929f1524ff99c5ea4a7d683b9a170e2ff4ad20465" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="1058442aceb4a2d82127eb73afa44ef673cfeb6684340f9de7473bd95a5d8952" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="5eb21798337b0e153c767259a0fc0b8848f61beb34337c2ede5a5ac89d82fa82" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="6e4e7cbc35b3f3a1225194ef72820c8f82e97059aa84ac5c96b73bafc8fb6128" name="kernel-rt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="0378addcf6c84c9e268197df264df80de3116541b8ce48cf3b9972ccde6546a7" name="kernel-rt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="162803facac93578755a088d2d305da23672979ad90b75d92813757af5d67bba" name="kernel-rt_debug" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="4e5bd621c5057477b72c334e63201b9242da458151a4e788806fd029aaa70bcd" name="kernel-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="cdda358127a8a9e036d3486f86cc09ade0d77ff76873ecd05ba23f1fc618212a" name="kernel-rt_debug-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="16cb47a5a46c01bb86e8c3ca831278387eafac10991ef94dc21beef419e54d98" name="kernel-rt_debug-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="cd5f9801d00e624c8d22c0fdddf7f95d25d20cf9d23ca23edb3a6f37389e5e1e" name="kernel-rt_debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="64b91ea63858954b55a6caa6b4e67c8de7296d0e60c1e91a67697dfe7788927b" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1b2a2f78cd9d2e0e693efca3440ec9ce091718cca8bb244466042b0147a6468b" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="8394507deabf0a54679f527849691067b665d8bb3c53b14b34de85a4c1952185" name="kernel-source-rt" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="4cc2447ac0db397a5729a6a1109b492d31eecffd5c02bea04e7ea2f13ae95eec" name="kernel-source-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="aa1ccdfe33f2c3048fb8948de3f91448cda3beab19cc41c284cd850258658a43" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9abb567af2885c7f74fb1b96e6516005292b1b2920ae3d02cd9769a1060fcaa3" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="771dcfc8653d05363baf924f72354b30d60abc2a64af94824192859306c6caa5" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="53bc2504e77d35f2c9fafee6c0a60964997e1c61a7692ad2cac9dc7ecadccf88" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="fe4f11ec6d995e255297689b8a08986c30cff78a2b9ef276000f0b41dacf4170" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="8bc91ae9087c7bd94efd75844ba41efa1e052678f60fc96c67f243f0b2c28191" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="2c8f9a247620b41538f76b9ab8c9f50f8f6d6b89b94332e4020f38ed2b9618a8" name="kernel-syms-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="d96eceb02ee26fbb6cc17cb30b56595dbbb8f9eef59485558bc3294916a0a0bf" name="kernel-syms-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="be7d61e7e2ff2a9e8b691eec478ecf3e714f8d3dd8a23cf25f1fb1f653f17f77" name="kernel-vanilla" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1568e1e8095a4a49661920ebbbecef0eca3064c3fda8ee8028456881d8656002" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bf0211db72c3ca7e9454faee9ada24bf80d83979362ea5f49470d92bc7a16a2e" name="kernel-vanilla" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="ae83df43100fd0a41b787b693f05823e213321f61547caf2409a7e6981f84adf" name="kernel-vanilla" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="510cd77a7792f0c2d87abb7ca55b1345e03e30436bfbdc445a01da121e49bf43" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="212cf8a91ff8aa1765821b485a752e349a3db2d20812131b9bc826152c5e9a40" name="kernel-vanilla-base" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="05b9af246b7d0707b6c0d2f5b6379548cf0c1a5a954d8c07f0b974356f75bf33" name="kernel-vanilla-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="226977201606481dc4ce2cecaa6072409b8d9cf18ba18c79be6ec77c55b0d3f2" name="kernel-vanilla-base" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="914a32264e41ed7a3316787ee8d10a3f5c39b88b01b67c4b31d98c6a072cf1cb" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b00597432b5fa104ab16ad71ed3b13b47b360a29047f914b944f07c64b2ae266" name="kernel-vanilla-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="95dc814e0e5df8e31e2ce2b532a2ec8c43dd6f7f7cc51ac57c5939070096dffe" name="kernel-vanilla-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d3caaf77c3e70a45886a537720daddbd124a9dfc4fdedf21cc089d2aeae24be2" name="kernel-vanilla-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="137d3781a704b7bdb7d19bcdd24d747b233453c05f949e2aa5ba6939b6750799" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="6ce258857935dccff0ec336e67183a2b8cb673cafe90f8136df48decdcac68fc" name="kernel-vanilla-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d5bad1fbb82e3a4e876112c92088e3980871e3bb31fd85498df3a1fbf8bb8540" name="kernel-vanilla-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="baaff5f35dc9d5fc8a92b969c590ec872be11c89c6c6bbb752ff9652fa21fff8" name="kernel-vanilla-livepatch-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="722f8e9db9e8283049d184be9a8664a4e3fd3fa3b6158a31b357e302c54f4716" name="kernel-vanilla-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b7d5180ff4aefd2b730cbdcfc145f70163091fd89ca62946a204e7720c419bc2" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="772dac665ce47fb1f712d823b3935cec26dd3d30fcc19aebc3184301f5069899" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="23cf40290d2b37e627c75b64e4806ea282b863621c9b932206f8a37229198cc9" name="kernel-zfcpdump-man" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="6c674b6ba1acab5e25055476d31198211cec971dff96bb803394d858fb9de0ea" name="kglobalaccel" arch="src">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9c607635678b856ca23b5c5c2f223abc643c591533532a3084439ef65e8b4e96" name="kglobalaccel-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="ba6ef058891b90fdab771b820ec134ee31412b5fa0053a8af95ecb2a619125b2" name="kglobalaccel-devel" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="6cb0a4ff8fc69f0dd9665defa3a34b0705f8c4a1c146cc67d5e5d7772fdd31bf" name="kglobalaccel-devel" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="5b019c45ec329e35568722ddf5058fe09d752b5a08e96eac1f39fcfc77136cb6" name="kglobalaccel-devel" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="26191b2b8dbfe2e1a735285a5eb5b286f1b80fe81ecbf02917d57912abb97b53" name="kglobalaccel-devel" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="3a306452f2b82d3ef8c05d841ab85ebcb43152f53dd0a07e3b90f0f8fa969f56" name="kglobalaccel-devel" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="b0b19ac1590b7a348023b19edc02d4a23fee3777062edb297f594f4249730b6c" name="kglobalaccel-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="c2add3970e64219deb4dedc87b8b8b0867ad1d09b4e253e54e44176161f40e73" name="kglobalaccel5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="1372798fa047c2429cb56c2bea963ad6a82fb55481b758fa99bd710758e9d776" name="kglobalaccel5" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="f74f56585dac7165698e2617c7eafa96e2db3c41bda2ad1b6cccd6b48115be12" name="kglobalaccel5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="84d1631237bb14989fa6ae8cc5688a169e8258e1ec99d6acb175738803093501" name="kglobalaccel5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="91f5c32433eca6c191c4c47ce6c98ebc68d15e626a24bb8d050de8a98252ea67" name="kglobalaccel5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9031a85f217869cc53e90c0981c51b6fa8b428817943125503b8e4056484f851" name="kiwi-man-pages" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b74d4b6d6a6a972ac4b218abc18d135ac5936efa1305465b79a7e261a5101138" name="kiwi-man-pages" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="bee0a9d4980f2f1839eb79e02f084cf6ab4c7ed1f5a5b4a1bc9e2332824d2229" name="kiwi-man-pages" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="76eaa4ec7f5aa82b951960e293a7dca6e188712a1efe92117af5dadbbbd9dd17" name="kiwi-man-pages" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="f00a9380855e825cec8db075565b2f0f0a64777500bd3b5cfe3496c4708b6925" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a447e13e5cb276b65036b830f799ef406b7ebab24a41776a276cc607b5964a92" name="kiwi-pxeboot" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="c74de3751b5a600f30c481e190b95ecc4fc7215941e528270231d0ffba223e9a" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="c95a09d702c82c028f526661ca00efd4fc40c8bd06d342b1224efbcbb6f28ddf" name="kiwi-systemdeps" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="166e2b4604d8d2a6ba1423b7584b2286ad790638ad0564122a552787246428d3" name="kiwi-systemdeps" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="104ec80c6924e6fa19fda0d6c7e0d8312b9eb024025424b3a83a1cfe32402a8e" name="kiwi-systemdeps" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="05d78523d7e0e196c433d7f0a66fb771bea1c3e543ce30d5e2228a2f7a2cf10a" name="kiwi-systemdeps" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a3f52adfa14898bc3bd819a13f47a45930973cc5270fc6c68b15c6c725afc4d3" name="kiwi-systemdeps" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="557b6885e59c0630e4850deef640322644a9581610bc91eee3de20050415fc4d" name="kiwi-systemdeps-bootloaders" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4d5be9136b80de15b2dc9b78074819b6958e18ab293bb701919808fd961f3728" name="kiwi-systemdeps-bootloaders" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="65bec4085817a11abfed1d5b1bf38a6fa89355a3d06df056e7267dec4bd50001" name="kiwi-systemdeps-bootloaders" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4f8a0d7e73b4788d893f084fd24c1b76295dcb9cdc2c5bb7f346da4131d1ef9a" name="kiwi-systemdeps-bootloaders" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="04529da86ba6503881090fc638768aea4647a2ff79a9e79160a977ed07965ae3" name="kiwi-systemdeps-bootloaders" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="35a20c04a938dc164f153943a0d3771a54524fc5cae7a0ea34a46ebb90267749" name="kiwi-systemdeps-containers" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="854663bbce996cd0b97e796161b1c91332c3a3fa1036391ee281fc8ea7138371" name="kiwi-systemdeps-containers" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7dd2a1e6ee3d596323af4162e974cd08228ca744e22ed3c191b3bcaa38161d1a" name="kiwi-systemdeps-containers" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2a3ce448c711c9c4373638abb4a1191d13f0d772f3b3acc18d93489eae1287cf" name="kiwi-systemdeps-containers" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b5a29efb9c4378395e4a545284763bf979349f9b88484a0795547b7696394c26" name="kiwi-systemdeps-containers" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a6d35d3c77d04001eb492e01055bc19bf305d949c5f9de80fe80565745069252" name="kiwi-systemdeps-core" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="165a56b5a3a4cb4c0dc1b3cfd6d783617330996cf85ad6f0d6c94a7195d459b3" name="kiwi-systemdeps-core" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="700eded5cabd0020c42ebfa38fd0ccc469ffca6375211973e4271792f727103d" name="kiwi-systemdeps-core" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4fa82cbdb18b6e28eebe3fe385d67b644ba6a3a9cb830803ac2fc24496606b29" name="kiwi-systemdeps-core" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="f096b8bd7766ed4f1e5c71e1ec344f79d406f227daa86388f7171eddca5e63e3" name="kiwi-systemdeps-core" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="38632790c64e768302cfd34110a64b93a6065393df30b2baec72ab058ce28f0a" name="kiwi-systemdeps-disk-images" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2de78aace414dcb87e920848cf28ed0a9c0b06501ffd1961794765e6c5da605b" name="kiwi-systemdeps-disk-images" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="63869906caf472f5fee2925d1db3a4b74f98a236a2c4f3c6337cc719d36ca789" name="kiwi-systemdeps-disk-images" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a0f9febae20fe5374b3fc59704660b9768cb8af9855b14abcf6091b678cd32c8" name="kiwi-systemdeps-disk-images" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="0d5d1d44200431a24813766f221ad6452a9766b7e582a2434c8e95ddc9ab48d2" name="kiwi-systemdeps-disk-images" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7290c475c27575f3160554f6ecb447f9afe3f8e3b1cfb19e8e34a32c42dbeaf8" name="kiwi-systemdeps-filesystems" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="fe402b328c9dca06159c4982ec501e23aa5060b4d7b6336a5c08d3bcb7ee9572" name="kiwi-systemdeps-filesystems" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="70d7790900921fa3a2be1280a133c07ccef290731c11b34866c6b5ef02df321b" name="kiwi-systemdeps-filesystems" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4300885b2c94658d7bdca890e87e3a63a1e79d1b81ec52413d0ca0e0cb74c771" name="kiwi-systemdeps-filesystems" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="8d21b0fe6e240a66f9377fca25eb71d7a91a90db1f22b9fa20be65d9f3567dc0" name="kiwi-systemdeps-filesystems" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e6e63659386835fa5400bedd8c3d458877e62649e72e7b01c54308a69124d5ea" name="kiwi-systemdeps-image-validation" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7785827d36f95276b1700b09fa342ca33f7a8cfd776005fb2c7d9397db0aa8a3" name="kiwi-systemdeps-image-validation" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="fb32a6c92087dfa21b7d67eb036eee6a772b8ccfc98dca34b673436fe04b919a" name="kiwi-systemdeps-image-validation" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="209f06c06701089ee6e85e87f941ee6d6c1a2b9dbb956e584faddd254b198e5b" name="kiwi-systemdeps-image-validation" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="082e1396f66fca2ccd2c47b02d77985936bfe834ac9c39dbec16f36049c324a3" name="kiwi-systemdeps-image-validation" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b348649cf430aac224eb3c83d8ae56f35bc427c0f511b97924d9966e11274053" name="kiwi-systemdeps-iso-media" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="76e09ac664824f595ec11b962ba140c275ff6cbdadd7577eb2398706aeee0824" name="kiwi-systemdeps-iso-media" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4921127c288ad5a3b64ea785bce8a70952b697cea4218df02c00d89a2dd74320" name="kiwi-systemdeps-iso-media" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="6b6328dec44d2da93e59e36386a35e30869527a3ea79073d37d9ab4681f4f79e" name="kiwi-systemdeps-iso-media" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="9fe99c1f1d24a20b20f74e21a2b1423a7cd4b58e0093d2144db9fb7d9117a457" name="kiwi-systemdeps-iso-media" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="188c06ec54f79ab8fde834dd90367ff299a1683f797396948f70235e126a1e7c" name="kiwi-tools" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d5ab485bd83b833c0cc9d3eb786b53d5ef74081efdd422cc32dbeff280cfc62c" name="kiwi-tools" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="552bffeeea1ab33f03c2e395a63b4b356201d382b558062fd661f122657da5b0" name="kiwi-tools" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="8a7036dc010ea4e846786b49a734a49722b6f3975d5121ca6fe313941202d2d8" name="kiwi-tools" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5ac128f9e09addb42931291c340de8b7d644838631cdc12c298ba79fda8c853c" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5d063c50151ab4e1c12de7220d1d63494d75f195e31cbd52b69927ebdd3f3f90" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9f488464e94fc7fa220f02994b904c3bf12536b3612dd9cac4c46460fed107ee" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="2b9c5a9975fc17b585929a6b3fe1c3d9ef421820705e1dcdcbb2cf9bf396fe6d" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bcb92d93c5d6c3307e11a74573abedf70abf6693d8393d7db8824f62235f5b0e" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b47d133312620c19977aa59c19641215d7436a4841492a4d76ab719ff1cd6877" name="kselftests-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="f45eba6b3b6c94dc532b4cb48eacf2f37ddb2dc88d9a911c881ee399ed0e3b12" name="kselftests-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="1e5af676aab6c1e60aa598dc001d42653de89964a2eef1db487ba4b7d880812e" name="ldirectord" arch="aarch64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="2d668b86ff9ace7aec0b46aae7109b4354e9929b2bcb308f05095152be986955" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="33165c963ac4cb0793877e18e04704bf5ba0c3198726f65f5300441509f8f51a" name="ldirectord" arch="ppc64le">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="a56533037a660d90a9890f46ade7882026bd55abacaab3783c6502175553d3cf" name="ldirectord" arch="s390x">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="b622b164f71b383725fe837060717775a3b51c3d3170a696ade5fe5f3d86fc52" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="b220acf8b1a42f4c32364ce9f5a6357cbbe6afc0efbda2347d4b40ce75e26d68" name="ldirectord" arch="aarch64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="2b6093f83b7134e7363a32f97d194f8a70ee5a73b37a765b27e4021487713f80" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="e9a5cdadf7b4a683aa469436c1d57ffc13672f17d1e5042618ff794fdf1f4469" name="ldirectord" arch="ppc64le">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="72ffe86f8986e0c5603469e070cab1c27ca7da78b9985d47e66d3de7136537d1" name="ldirectord" arch="s390x">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="56de18c4933e3e7fc41cfa8c5d78393cfe2a24504728b40523be1cb624195dba" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="32bab67a7fd0571389103760029309a64f0011ec7e5eae093892c10d34b701c8" name="libKF5GlobalAccel5-32bit" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="dc9fc66c6915afbc5e6ecbcd2c19d2bbcd193e55a446cebd7634742d2c35607d" name="libKF5GlobalAccel5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="792aeeec134da7225d38d98eec7fb4200da21e8c3a4569d349c08bf12ef4c5d2" name="libKF5GlobalAccel5" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="01c34a34f2ba9f61acef031523c2b852b2f86d70df6f6adbe954ed98004ec8ee" name="libKF5GlobalAccel5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="fa35242d330005da9b41afa3897d024051ac5632e5fa44dfc178bcbaf6c5c2b5" name="libKF5GlobalAccel5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="41980ff3c4b803c635d4899182e131de56f1014c2d21d904c5a5955931a53001" name="libKF5GlobalAccel5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9f95cfc291c5225632c8deee9cf7e036aa04fd392c95c39d8354267244a688f2" name="libKF5GlobalAccel5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="37cd9a645e3e57431e878dffdadc950ec20f4354e01c32c45a275bcb923ad382" name="libKF5GlobalAccel5-lang" arch="noarch">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="2ec433de2e9c08872379afe05c06a6f0ebcfb3ebfebfaeb4769757041d10d465" name="libKF5GlobalAccelPrivate5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="18636fcd00c24d6057e363261f8c2e7a07e652afe5af1a610748f1f5e6bce4c5" name="libKF5GlobalAccelPrivate5" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="4734d79e6a50d0994091be6892c8fbd056c170069502304f9debd718df333129" name="libKF5GlobalAccelPrivate5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="0e7a73ae305460ac83e9a4cfc0cbf0b481829a1ecd96ce64aeaa85dc1dde88b5" name="libKF5GlobalAccelPrivate5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="66b99acc9cabdc446a231f7639bac4834364505d8952ede56addaff42e2f6062" name="libKF5GlobalAccelPrivate5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="35c56bbb7c0d24b271eabbf63d8e5d4d5c7759e9767a3587cd1e3486743b2afd" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="c5c15c085ef64357a2b36d8f36ff5a186c53680f02a6a69518fe52778bb2f6f1" name="libMagick++-7_Q16HDRI4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="f2320d710f52ac7bc87133ec5f6dd7453da788d9a2bd7e3149f76c7ba5b1a19c" name="libMagick++-7_Q16HDRI4" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="eef346551e8976a66aee02e0f7023704f457d52004d91d15a51be323cb94d240" name="libMagick++-7_Q16HDRI4" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="185b49066ff0e47e62d642a4dcb6bfaad311ea8e9890fc2ac185f5341e2bda61" name="libMagick++-7_Q16HDRI4" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="74a8530ad42e31bbf7c1c81c62ff95542d2dc80360c219a74569e44dc76c702d" name="libMagick++-7_Q16HDRI4" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="f23853e83ff8d0c0ec628a7c94d5e8fcae7ff070d6ee63da9cd96c194cee277c" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="938a18d7a5718cc51b0028417fba6dbb7da01e9538f0e821ffdf6b92ccc74065" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="8099a61d7eaec2012767ef07766bf718b6236b498e6c7639f5554154c2a7df8c" name="libMagick++-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="bd9ac2aea6070cb9221b9bd9da22260b075d2a7f9bc52a92f52412f34bee93c7" name="libMagick++-devel" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="d623f09b0565c3345eae87b1a6def2dc5d08d19c574ab04ce8ab191d2c5a5449" name="libMagick++-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="35068cf3fdfeb152815ce58470c6c47c366f182282302a2f984ff8cd493c4ac2" name="libMagick++-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="3a9b369c9937725e89c395411d2d493e959a1ca8290467ab65c8de53135c1c02" name="libMagick++-devel" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="7fd5cc0bb5df1644901f7ec06c411a1e856eee52586db24d70594ce9f4685cec" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="e42bbb0a3e073bb9a152627585d6f50f85cf8856f963c61616d47942e2c3035b" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="add11630e1a94c9e609ec569f1c79fb602bccc19839bfc39651d27fd78077dfc" name="libMagickCore-7_Q16HDRI6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="1a7fffaebe220d9737723f6f7c85e1944737f8542cfe53aea23e01589c378fe1" name="libMagickCore-7_Q16HDRI6" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="0b1d0dd6a20444698f7b2fc2bbdb0145212b274b7fe8d73ac836db25fe8c87cb" name="libMagickCore-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="f2f483273227418aeb4f4a910a8f6c0e3e45cf77f809e06de9d5c33de383972c" name="libMagickCore-7_Q16HDRI6" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="e185d665d5dabc09e4a6d1f4f9172f4e6947c3d17f5b567ffe1695640c8a7f01" name="libMagickCore-7_Q16HDRI6" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="15c487c395a9826c0a016c6e25ba320b51c66d34616602e007e35b10a5cea9ca" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="39236a8d32466f3db6d84df486137a122ebe4e0527ba5c83bd162b6428b7aa22" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="0b8aa7118ad572f5ef103b3d3601ee819da0fdcce47ba7013461d3a8aaa22e15" name="libMagickWand-7_Q16HDRI6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="cca5910b7a5c421379d828e65d19949f6aa896e55e15fdb7b0d73670459d8872" name="libMagickWand-7_Q16HDRI6" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="0d8a4c628f817dc9aca3c2e28acd08935a461f3ed711a39811338321e752e044" name="libMagickWand-7_Q16HDRI6" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="5642ca52ab649373f48723a6938f8dba24cc36e0f81ff4021e005125f8aca8c3" name="libMagickWand-7_Q16HDRI6" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="f353827f06f7b908e41ed6d719393f682af6d9906c07ad8264ca36f74a90169b" name="libMagickWand-7_Q16HDRI6" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="002c7e9bd4a3954de54ddb202af2a6a1e59781e4c600c17c5682b4ecc0e04c2d" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="a47656514ddf277b1e71ffd44bf4cc213484006984388de5929164a30561a9ca" name="libSDL-1_2-0" arch="aarch64">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="9611ea32bded4e05323e3e3b3c00f7c9f3d97523e06b147d91fd7e231341a5ef" name="libSDL-1_2-0" arch="i586">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="e7e2a392df0f0e5cd043787bedb54c579f7d8b657c1ad1112402a163ea3d0fb2" name="libSDL-1_2-0" arch="ppc64le">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="1c0a063ba11ca5aca414d300aad55c818a023a3d86bc6c35a6166b28ff05c707" name="libSDL-1_2-0" arch="s390x">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="4500321881d0f64ff037675c5b4ff081d6e7a7b26e56dbc9b4c88f542180100c" name="libSDL-1_2-0" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="75fa8b6481ddad8e9874d3d8033ea49054d56576b994796eb4e89ce7032e488a" name="libSDL-1_2-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="4c17f0cd216aed0afa1ed327b07d38bf3ce598466bc4fead0889b5fed2ce24b1" name="libSDL-1_2-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="17cae5ce8d89f96399a2a649267f7f62f26224d314bfc075e6a3f0f3aa992847" name="libSDL-devel" arch="aarch64">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="d42141ed76bfcd9d9a2271a72e38599fcf6e0734c1f2a6060f8fe6b43db528aa" name="libSDL-devel" arch="i586">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="94da0c481c8ca858043c3c18430f8289e03c81deb9d4e77b9a14cebcdeb60d20" name="libSDL-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="08506a31b6562e3d6cae026b25f2c499d3d6a1b5a4b4e7852d6aff1c358b64d2" name="libSDL-devel" arch="s390x">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="b3def6d096122c3f913aeb99545088ce99c4f186d5b9d2729e4ec016f5f688bd" name="libSDL-devel" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="8b3ccc1800b4fa72ee5583d64182fe493ba8fa75b7dfad6df5490744361771b8" name="libSDL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="e4bbb28087a9ef56a09308015ae8b62de381a4dacd1eddd9e79513a4745f6a73" name="libSDL-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.2.15" rel="3.12.73"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="mgorse@suse.com" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="a0b27a79c6d82b21639e991d48ac8abf4b59a7a5b3ee8f27b2dfe9ceb5ac3e59" name="libXvnc-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="a3fc96cae500e070f0b62820bb71b77d3d8145e8b1c2150603d9444be58f31a4" name="libXvnc-devel" arch="i586">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="42733bd66c2f2fbfa62f44bdb14f371d1488bf4500e5787c5286bfa9515cae76" name="libXvnc-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="21fef54e890f3f3f5e13b64f15b6707be97691228f211804b789e68f904258af" name="libXvnc-devel" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="5ff712fcdf748f0a6bc7f32d11e1bf27c8326361caba95ffb9b925fa83ea6f88" name="libXvnc-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="28065b0e619d08c4a7a9cf6e9a6bfad619038cbf990dab448a1b3043a16f3e14" name="libXvnc1" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="4af0c617688756c1d741af90085e845710d7c5554119c96b05b50a51ea2d3499" name="libXvnc1" arch="i586">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="c88a23d89f901175ee47ed314e99c006ad3d3dd0244fb01f63587f1950027ff7" name="libXvnc1" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="bb6783e496ca9b46ea807922b5eb31fc913f31b286412f581a0afa08d14d32b8" name="libXvnc1" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="0fbed8c89e14d107081880516dda42fee59d993d78b1b5bc673abaf89eac3b12" name="libXvnc1" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="43d56d93214293f296cd5f12811ac366b8c6695a92d7224912505200a4393ca1" name="libada10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="749163db2b66d10ae1a71fe2b6813107113b37c9d04f83d42e9e046d8b191c0a" name="libada10" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d7079de8c2feda25db371815bf111be106a3ff3aa347343f8550b415297fa63c" name="libada10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d3f1f167d84858841aa0361dd107a76ab5da5a137e7b395b707da1c6895d7899" name="libada10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d7389056f6eacb5a6631b2ef0e97f86077f32a5b555ceb22c365b829f7fd1927" name="libada10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="4b891697487453380dfd01786822b9a8c3f71bfe80c2bb0f65fea244a9b0b8f4" name="libada10-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f7e41d3290d640a3c963bb90d927047f2edf7a12c525854c04b52e9e8f4e6610" name="libada10-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b2e8746cca7956e2cf5aa218e63783ead92559515141a32efb9e9270f0888fe3" name="libasan6" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="366476a8ffa0cbe9e313b0f10ce2d75d7259384bb11532fa3010a216013b6951" name="libasan6" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fb8b4604a3c791c2d4934d816b55429cd32526f687187faf32d0c5619200c7af" name="libasan6" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9d152ccb5d73f88a93a3696cbcb396ed7c82ef09780064549058e4306ae25f4a" name="libasan6" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1bcc4947530aac5f7c2b8809308263e7af85e74590c6ad50d5f74ee906446c98" name="libasan6" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="dc40747af84897e731fe004c1804cfef40e6ba3deab006bfca3babdad2e947aa" name="libasan6-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="34ac6fc75be00babb07b60ac457be706b8aa061de8e132a0b9a8a0079f2909c1" name="libasan6-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="925fd8a8a66951ccc312a323ab26ba0b62299c271c9ed593e56f809585542cd4" name="libatomic1" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d2fc30c58d6f979879b189794630dda0ccf307decb5585399b11a93af1cbc3fd" name="libatomic1" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7dc69120010b2d0e817d66b965419021f56f9e2a390a5dbc340976f64390e415" name="libatomic1" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="078dce5b0d1b857fb635358bea5abefba0e5242b59bd7922e202ed617b248e00" name="libatomic1" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d569e88c3191961a2fa24c6793acaadd959c7991de7f727eec29af8770f0a322" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7ea3933a97903dbdd24c3b252b9e1b464bc8ca2d1aaa00247511b94725db1fe7" name="libatomic1-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="e5b6a12198e20dc6e2ae0bec06ff2a02d246ac71a00e4af515a29c28ce704603" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c1d37b780fadaeb1e2c366a363d984e5bc10fca4c29994f836513fea6d243d5f" name="libbind9-1600-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="65bb3741354edd34c1d6d17bba5de4bc80efe43dde013575f190ead2ea50e18c" name="libbind9-1600-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="d97755316743937832cceddaa73cae6d2c3987b08687620171dddf2833ceb3ec" name="libbind9-1600-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2df217b9d3e07285d6712ba163ac7a31981c88cdbf70a922f9f344f0fe8ea58d" name="libbind9-1600-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7b3c4c7c8341d57996faa4cb8dbc3f7b42a780ba84899e634f500fbe3b9b0c20" name="libbind9-1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="961feca97b8d0b825a3d55f0159294ed604a4f2ca40a71d779ba6459539d45e0" name="libbind9-1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7246f5b6f485dbe3453f1c7835b3cc64763dc8776bd83ba54e723f2d112d4d9d" name="libbind9-1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="e7538ea4122fee4e97cd8656b91a9fe68e537989e7c0437f87968fb461378e54" name="libbind9-1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="b2d200159e39e3b9f505902cac52136576e0163f06415332c52ef42f00e3f213" name="libbind9-1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f7cf491e50bc0ce9be07440ca5d9a91489b61750674bd6e896a114c2069ad658" name="libbind9-1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="9d0ea21b952cf4035181e3d35274ba16e784ae95d0b19f315ec896e5be4c3aa5" name="libbind9-1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="ac16ca287b62a0778cb902f499c862deae5f396aac645d9377ba770aecad3384" name="libbind9-1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="101e56d705191c2a748a3d0200e0d1ab7918601acc85f6f6be5fa52fb593d851" name="libbind9-1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="cbc1abc4e0cd1ec93dfb76d3d41f2f5ac769dcabccc2f29dbb9646c95c95be97" name="libbind9-1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="38eaac1c8e3c11235d07f924d0fa53c5ead4371ae18e654316a066c3b2bdb1a2" name="libbind9-1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="a57906aabeed4fe4c1f0581eba6b64f09a69c6f648ec4dbf6832a142f14637c5" name="libbind9-1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="fd355fdb16df73ae6c92cec53e5c6dbd2a66906eafd61c31dbfc5d40e966579c" name="libbind9-1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="df4f2a15a5e023f747c62f4711c08b72c88f2e7acea3bb819008a473d0cd0ae6" name="libbind9-1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="a45d38072f007d46c30f03875c9cec69b689567187c269205fc1083067af5caf" name="libbind9-1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="b36c7a87a07eb784321fc47b3816dd44353a0ab63e4e747ca5061628468671fa" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="62c57dcdb3bae9adb62e250fca31721996b5bf5368060296ab57dd030ef3de70" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="071a59207f7644671b2672040362dc6c4190b8f94fdc985aab90a4599a5ed7ea" name="libbluetooth3" arch="i586">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="de763293bd96aa17e799e57aa208e65b26cbba3768e18c22b217a0f09449b14a" name="libbluetooth3" arch="ppc64le">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="6471aa0410fc2393a13f5b7805bf9a45dbac0350e69767f8e6818b332252003d" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="12e2701665176d12bbad2fb3992c16c7998cb96b2138b8f9b4e7a598c6ade3a1" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="8a10d6e6ed69c663eea6e70082e329cb86a06012329fed3f0d81005a57a3eccf" name="libbluetooth3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.48" rel="5.28.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="acho@suse.com" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="78daafd30d5943c68f8a809aebb719366008fb2814a0a9ab2c0b37bd69ff06cc" name="libcephfs-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bcebfa391914c729ec42cdbb179934be8fc09c31b798759f44893c350048e709" name="libcephfs-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bd54c92220d3789a0a22dc70ee530a33f86af66f9faae9f77a8387daa1722ce9" name="libcephfs-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7ffefef66195411ba7f080d8fb99f275c5883fb89da1a6c15312156133a8c769" name="libcephfs-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e13f206a6eb0a52bc2dd43548bfcfa5db588fcb04c817c515c6785ca32e8fe89" name="libcephfs-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5c0c0bffc4457e9cf72df08c1407d9b50f11c83ae77c3a6996d52359d712e3c9" name="libcephfs-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1c3002b1efc60aed4f9628d141d380e1ccc11da683a29e91d273f4b89f744d04" name="libcephfs-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="17b6e7b9d9832f2bd3e4623bf5e6afc5eccce232bee72b0d0d2a8bf1ca591873" name="libcephfs-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="59d6982aeb2326f92cd97cd450cf85240629da5dbbef63db9d058dc5b9418a07" name="libcephfs2" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="228a3bea31d8f22de2d4969c62ae403ffb4b25e366f05d9fed794b292ff6af70" name="libcephfs2" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8ffa497099b1d7dfcedbdfe6ac0d409630f2b653ce41974d56fe3a10e92011fe" name="libcephfs2" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c6683bdbdc4f2858eee40089118cb74bf8c8e94d80e14adca8d4a3affbe28e8d" name="libcephfs2" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2bf57d4cb71f89c483614b877c767ac128b6859127eb4b624cc57dc5489cf0f3" name="libcephfs2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="33e1221dc3590caf44e52eb641503c6a313f48f3df9954f0b1ea95a81807c8c5" name="libcephfs2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b73093fcf1f8f732c3a4be84ddaa5875651069d06ca4c82f3c6565688c076a45" name="libcephfs2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c2ff6484fd284df8ae2bfd458104f8a65d5c130e7fc49826bd64d8913ddbcdf6" name="libcephfs2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2916272661af434da5055ff4ae921e365924e599a43c4dec005637fbb15508fa" name="libcfg6" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="8382b53f74423c3cd5926cf6ff14823834f3525a8457ab4af051d70168e3c749" name="libcfg6" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="06b6f483e080fa7d3f0e40cfd1d5b369613e9d03c0e6a29890fab4e11f9f496e" name="libcfg6" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="4e37e9442657bece904e32eb99dcb78a7480f324b538d34f2160e1f1bae1875a" name="libcfg6" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f1ab51bf4482a2484533e78991f717d68e5d80e4b6d82cb2d096c0b493c97166" name="libcfg6" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f84b69b55177571a19c6680ab8cf10b8a5274052b9af51d40dea8d265ad720e9" name="libcfg6-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="1e3a0cb8010abf0f8cc73172841e47a369fc3026b8f5ffce8915fbbbbf7a486d" name="libcfg6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="4c42fa4b4216b0d038090d53905336dd6e8ef984868ef7dabef428e5189efed9" name="libcmap4" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="ad7acfb04ed44b4428ffd59be0a3821dc59079a404c45ed8a5433494a4a631da" name="libcmap4" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="b7aae15482fafe18233d6ee894a975eb9eba773d67f5a4385e7b44cee8cb08a4" name="libcmap4" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="2f413204c537900b371dcc0efd560aa0644d0942debd7182fb433022a19c41ba" name="libcmap4" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="bfb6b8ffd669ac6d02f94ebf0f9ab46c74e7678abf1b8d5681f652238907cdf3" name="libcmap4" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="6632fe2f4eafcced29ca9cf78b3e01bb47530a4b4464b0241508acc66950826a" name="libcmap4-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="3adee358bb52a99002aad899f6b8eeefe3b3b9c293bc491719ea4969ca4c1a7e" name="libcmap4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="e4380ceff58d421aa0477241aa4843266bb79d787d3c7f4a2c605dcee3632af2" name="libcorosync-devel" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="939d86901b8ac69d2e3e0243268b61c8a218dac774d21133801a9ff3b26d5b41" name="libcorosync-devel" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f108e0c45818215176b6a25f2f959dc0bc73469568e8424ee2acca66090c49ec" name="libcorosync-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="cbbbda2515f3da2254e22818fdd3c43336826f3ee681a3a3522d3c2c3acc3cc8" name="libcorosync-devel" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="4a74ca63b2879e033f665bd56651b86bcbffcaef73949f9dc030712e18755cdc" name="libcorosync-devel" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="7b1b29bfa8d8192e002fe7026017aff30d0f71268315e9f2619bb9afc55a7713" name="libcorosync_common4" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="9174a6a94070173d0c2c9fd0603d555a1553c920e705ffbd7d1a558616fac2f1" name="libcorosync_common4" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="537a0c90a0cdc486b12188eab46212ea4056db3c9c97b89b079f3d6490f121dc" name="libcorosync_common4" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="4b81563c009b87987c888afd16322198ca6c1ac2c4fcc8134956d9770b3202a4" name="libcorosync_common4" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="161e38e762c2eb4a234404706a170bacd900bd2fbf79f605dc9b3c452153251c" name="libcorosync_common4" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="449c29fb156e7a153a0bc4b6564f19a5333076a3f379ed82298fc7a9a902e724" name="libcorosync_common4-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f64cd0b49422df208b0ee55b7756cc6d164122d12d842d595b0152e8f0de3438" name="libcorosync_common4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="2199fd505755dbd9643f27b2cefc2660e7e61918148a6c016f15ba70938d554c" name="libcpg4" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="74db942e04a7181d9beb2c023ba1ab69c375eb51472f7bfa3ef4bf1128430578" name="libcpg4" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="e9c55597bf0685417a3077bb2685149ed1e0b1543b8a6075d1327703019ea698" name="libcpg4" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="d87069a00c25710eed598dc25b61526811eb3260d189ade524c666814c970243" name="libcpg4" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="0f738c148d12fb3624e4df42932a52519fdb39462c896587047b0eb62394988e" name="libcpg4" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="cd79240c4359df5fbb0ba586fcb4b0ab4eb3fa30dc90c61bb6ede773dab0f5dd" name="libcpg4-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="e6eeb6f3d9d6fc22db78db9615c2d254a6642318330a6486ee8afdf3fd20b3a0" name="libcpg4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="7f4eea114d17d5a8d8a7555204cec7b7cae0f88a52e1cfd9c87d398c1f71ac11" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="099ae6dc19ccecf4cefc7368f61b7aee8a5198a526b80885f33b9bee475d4321" name="libcurl-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e06dd31f233850cb96b6e46d7f7a9ffa090e6855a5d4391914f3bab50b5c7559" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="c941ad82ea02788405a91f3b8005421a9e5e27429c01b206b02425a4d6483f57" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2199566a33b6704fed1a0f02d64469a9983ad63dd895712e121a47c53352a486" name="libcurl-devel" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="34e74c96f652c02eb1675b29b04f705575b6ad081cbb9305f60d0c8a96866e2d" name="libcurl-devel" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="09c7a117f07f912f7d6b0c6aa6bcc4afaaf35bd28167bf33324b82e830fc1a0e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="61e1ff717789c8b4963c79673f6be9628900e40ed7868cd934913b3b70bbf7f3" name="libcurl-mini-devel" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7fd43f8219abe6e331437afe5dcb96a24c7113e237123999b251fcacd116b396" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="b399bd21183b5202a844572c3a85a227d5087e8ae78e7abb027e5274e9c05b24" name="libcurl-mini-devel" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e5092f406b10fdf98460122eafc27a447e21ddcc9093f72b90ce7b9db84a1308" name="libcurl-mini-devel" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="d7d7557db8b60349cc498e0ac1815a2a7c31c98a5d943d586280af38eeaa22e8" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2e963d20072fc86d88dfe0cc29994de87b59ee038cffc0ba079db54982bff4a9" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="3731a14baa98dc44efea30eddb32b26e6115e494b91a57553e8fbdb9e2d74ae2" name="libcurl4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ed8cead9f99d97dd7bac3e472d6694754d14a6cd9c2dfefb0adc2d5030d84705" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="659617b3a96aa218c3a40a762e124e3a301f32670ea8a0a4f8e4b54bb251489f" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="1edc326b11b96d284ca81ad2752abf53a59db11df8d89303d9fd9904ae62b1fd" name="libcurl4" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2664f7622d43936acae8c4c212dd0004d4a4753dc4a271f902d41d60de9bdbcd" name="libcurl4" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="67161338cafa2692a81b44fa2b4ccf26be41570d219adc5be96a1eb52c0d9e04" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f266fc6785e956e5db22b216b0ce31e3456e6afac6436f935afc7fa3208355f7" name="libcurl4-mini" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="54cc31c59567f50e7ba95cde2fe076c892e612793180023a8246aeca38839fe4" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="98f1285a54b3e6014e017508da5cd555a6be81fd1bd4046f0ca97385ffa58421" name="libcurl4-mini" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7f86c5620eded4a015dedfb2514ee1b567a05688e4d8cdcf80942f8739cb059e" name="libcurl4-mini" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="c98cf34671d647d3a5a4812610902cdf8b19202755a9f10c68f326faa1e87719" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="a46c41fa7bbd764882834a42f1752f97c54252d7e9a17d93f00b8602a00cf346" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f20b85fcf0c780c07ad80621217914bfac9beb6579e6bbc17995a1a5860b631f" name="libdcerpc-binding0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7f000af1ae02b36a90b7f0adacd3a532fbda0aaa3742edfb2eb3410768c0d64a" name="libdcerpc-binding0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f7faad68d4558e4580b0f51c4618e7faa4780e9dde4a1947f6d6980730a8ac22" name="libdcerpc-binding0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="3cac4264fcf9017d42fc949c614cd2a574ef01d9c364f55156b907c839d1e263" name="libdcerpc-binding0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a39d8ea5be2c143d14896f08d756eecdf2b24bfbe4ef57f121e299a98d9d4208" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b1b3a69664f6c2119dd598690ed8aea45ed94702cfad0b8338e68d138cc4fbd5" name="libdcerpc-binding0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="dfe03c57312febde78263cdabcca98daad424474feb010381adec0542360fe82" name="libdcerpc-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e8d4ad1f937db627e7c2f9acc1bbe4e8004e9ca8402f49d5a2c457ef6e55cf1e" name="libdcerpc-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e4a1ad48fd9d20c5185e8ef25f76d2707753c75540ad22e4dc7f31892560e5ec" name="libdcerpc-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="40e172abc5c8c65746090fa44777eaa4cafa787e444226feeaa3310ac7aa65ee" name="libdcerpc-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f660e0361fd06bd27a1f743dea616f1a6e1eba43cc2c4da07414b2abf2b622f2" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="19a919eaec65f5a21e26a7bc0b9f362bf47c95f042659d594956521dc25a34b7" name="libdcerpc-samr-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9a3f3059268914d8b4b7e523234270ec8a11e7f5af50297b785ce564dbefcfa8" name="libdcerpc-samr-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4dc80e48b9617ff89d5753c1a7469f977f38cfe4ce943f450d4f4e84092c488c" name="libdcerpc-samr-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6d2d6e76eee253c74da361cafd8b7abb495dbfc324a5fbdc39abb2c9acae3338" name="libdcerpc-samr-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="16feb0f7b28461a69f4e5162f19fd3dbf61a4cc9bdf118c669a05690ec279032" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b1e94f2729e847317cb2a8eaadc6ded6da78c9fa626c1a093c48f1dfbe622145" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="cf1f7f8cfde6adb6d920b822a781fc3e528fcc1efb68235ecabe0484d4667cc6" name="libdcerpc-samr0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7d97c6f3f4f1e678c292f155c93e48e68b13f3dbbcd7e250df634e5c8aa881b1" name="libdcerpc-samr0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ce60ec7502473b18758caa187060dc812033830325959dbda9c1b2fa73988c2b" name="libdcerpc-samr0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="39e9770d57bc6a4ba992b31f5fe0ec3af679454d8c2018b4be983f801b3b9139" name="libdcerpc-samr0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e5df95a1aea93cc7a71aca56246ba055b9e67e17ca537d637985ba9ecec19211" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="1b46df4e9dc5de6609c5b665e16dd025f250dd4817db4d2ebb88d4cd69ac72d2" name="libdcerpc-samr0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b14670ec89123857c476ec04f6727f0dcde1977b89d4291f13e2872c4021fa99" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6c0757e99c49b203746760e7284b10213438488a302bd665382f9838b7346351" name="libdcerpc0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="181c4365333e0d2f5f01f147617d0754f5b29b84a8319410c90bfa5869886b34" name="libdcerpc0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="bf7c76e3506ef8fe6b690f514286edacce324c3f2239017d19adb1875385c096" name="libdcerpc0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="30aed260aaf9195a5694951976eee6d4dd746c9475075c817f2fcc47d8f046db" name="libdcerpc0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="57a1da542dc4614cfafe415c5ceeeeab71a69b870734328337b34da30d3c088e" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b5dd9a1d7a3ee51dda4bec9204e222b461f2bf05e4032e39d988d021777370ba" name="libdcerpc0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c83500ae7be69fc43f8867535e0449cba17d1abac1dc7782e7c195fab2630067" name="libdjvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="ec0830ee27829200792c2c934c1b3467706d221fca1fcd66bad88f8ab9c84d63" name="libdjvulibre-devel" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="dc98b21ee9f68412ec75e2031d8f3833d0c8f46c94d9bd941d631034ade92d7b" name="libdjvulibre-devel" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="0a6bef58f68b5fa07b2a48bcf4f157567730350a8000df8399873c4320e2916f" name="libdjvulibre-devel" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="eee6461e08130838ff272a115c09ec0811c2c3dcc5966aa73521b607076a67ed" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="9b0f4727ee654189ed81763fb49af229861b2f24e7d1e148ca872303dc18edca" name="libdjvulibre21" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="7215a30222e09f2543ec3a0f2eeed9c9ac9e2538e73a720c7cc720c755e436b0" name="libdjvulibre21" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="28417c2eccbc9c0b11820e074128c08d80e15c0f67cdfda374d0f4fc5cebd0e5" name="libdjvulibre21" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="167aafd652a6f00a69f894153e63a742967d20fbe3a6d63d41f3fec6e7eb30f5" name="libdjvulibre21" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="a9f493f53f3d36c687e259c6f960b59f6227a2a3882ea2b4b643f615bbba5bfd" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="db6fcdaea81071f60833b71c241f2f6ce11076acf4ebef6952c881eb46a8d6ff" name="libdns1605-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="397b82c0f73d826b269f1b9c6ff5d0f4b5a973fef50c1446af532e56de2a5264" name="libdns1605-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7a3bc78329272be4b500a496d763d028e8b9d08e6edbeae6bb26ba2f584aa10f" name="libdns1605-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c84802518cdcd7c72d41901f4ad090e384d23e4514d042ab517f01c510b58758" name="libdns1605-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0c5c8d681316292ba02de877403b9b5efdfbaee7cf1035e3bc0abbe7015986f3" name="libdns1605" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="bfa3e3f75b4be38107bbcc5842ec845b26222d1e9c07d73bc8040abef848c342" name="libdns1605" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="dc635e392b440d37067b0db6f734dff94ee43bff39a732e9d510d92c64c94484" name="libdns1605" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="101a5bdb5716ca158b2404efc64c371ce75e32e1402a9666cee52fc114bcda77" name="libdns1605" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c4870035f67aeddba9594960fb2665510a0ab2332174147d1fac3ccb1cbea156" name="libdns1605" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="fae97453623712c6ad06273c5700ec2f8df77056b06ee27c443f1e51eeb61090" name="libdns1605" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6c58a98d4df828986047c242424b6fa2375359420c7751473a2418021d6e565d" name="libdns1605" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="98566f2c6d6e58cad004eb54dec1abd5ef717609b9fef0b87bacbd588704c6aa" name="libdns1605" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="94c3933dba00bf509725a5614bf9ed9e952d460fdcabae7ea447195982357322" name="libdns1605" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="17bcfe01318fae8df03cc3695d0c581dba57a363a29f4400e055664761f50e19" name="libdns1605" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="bf748bfe38cc481ca97726ebc3bd9071e204ecc7c78bf65830ac84d3c0c7e702" name="libdns1605" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="9eabe7cea0f2996b6cfd7ca46fda9039adfc6a48cf9d08f4018540def14f3ec1" name="libdns1605" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="74678510949251db50335ca73f1609d4dee40aaa08818ae5f1e0ac15300902b6" name="libdns1605" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="dde510708e44bef912c721f25c218003f904696106aa9d234a831615666843dd" name="libdns1605" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="edc8e7842314014769d045dbf75a9dfe50e05e1dae69c7e62233ef415870f479" name="libdns1605" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="56854c4a77f298b9591a32ac832b241ae1562e18d855e14b6f8a5f4b6d99e8f9" name="libecpg6" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9e95a27f2b97c3fc02b35c6b58e620df7b94b6087c2deae2ce2b9c696ed8aa59" name="libecpg6" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a57aa85f272602232bbf6cb4c7827a466f1bf84dc1e38620d0b732c4261db973" name="libecpg6" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3cd3356412c32d603406a747cd3fddbb1b634721a8e3095f3bd0239408d37c03" name="libecpg6" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="8664df74e6f47921776972e89f1e9b84349e11b0c1384013c0e30b511a89a688" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="37ed1ff7a1b2eda2dc9d033cf98500a7fb469b25ae9091ef710c4360711acc27" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6a2185fbf89842e35300245eb192e024d804edc612327a51068486f15ed266ee" name="libecpg6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="ddd07eb4aeee4ea7e816935c72b6be2dd115306f5daa6f4318f2f7293f040c71" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="004a88b2037f7840680db755128683e063ddc9c1990b9132de7d2bd941b2c4b6" name="libfreebl3" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="4f5d5284a773734751a3d219ad98f1ce19c5c840ed44d24f1e37830b8b264aaa" name="libfreebl3" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="50bbc56ba0721e61038c3f98c07bcb706d73e8f736380e1f4a58e1b08d9ab649" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b72f90594a1e6594f79f6a3fb9fbded63333f8a99366beb87c9ce4394a0e0311" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="c5924ed24fabe878c68a139d6cb589f2df37a992bda1e572a30ffcf2ca65ce0a" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="8477b6bc66aa02e77f7b21de146635b0699ef6e5ed2c4fbff40bb825a4587a61" name="libfreebl3" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="817ec9d452174aff09547e414f7295c96f84ca022a53e3e85111f2ceef2783f4" name="libfreebl3" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="11818ac1eb79921ab157c2018729b1e3ce5d24b7ce12fe74e6661ed98b4b4bf5" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d0d43f1350bca0680994c8599da3587858d0dc4d9f59a93b97283171eb54cb72" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b6a8c9a4d0349f7a8a26d2a93526d12a439da2de1cc59a1e4761baf1054e08b5" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b4c76bb937ffa8bfbc5670f61c477e7d7eb3ced59633dd670c00df8238494f59" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="2b0c079b00617b3e9084d70e62418c99baa6747c081b46489084cea96585341d" name="libfreebl3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="fe7aa3b73aef226316fe7b54dbbcb1f85b88bd38437af1b9d52936468992c58a" name="libfreebl3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f0f05b9558c00e5cb91a522f51fea7c76ff10a9cfcac5594c0c33e8fdd503e5b" name="libfreebl3-hmac" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="cc89a662d62c7c1449f28e92ec10a1282afba067ce4199459104493005543e25" name="libfreebl3-hmac" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="421003fe80be80cb834d6a487d807f8475bb5f3f81f1ef1d4cada39a482d55b0" name="libfreebl3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="7e21d3c090a3102984c15692cf1fe98d0ac1708707e73efa42d40b649780f85b" name="libfreebl3-hmac" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d555ecb7fecf64d3c9cff65ef10dcd8983021320067206215b2ec130fe466675" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f4cdfecb15cc8bf0c22c0b6a0d63db6ffa418531128940d0864b483beb7abe23" name="libfreebl3-hmac" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="19408da3e3ca4e02ea17e9496294f4509766dbf989b4f96351512277d3aba99b" name="libfreebl3-hmac" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ea9ceb87f69a676e9333ac15a0230001e96596ad4d747a6177ee9df6dfda347e" name="libfreebl3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="80ff504c1b4185da180f7fa77a6394a1b1f8af8b87042fea002b1f1f19a53e2f" name="libfreebl3-hmac" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="c63ab686249f37f41d0f1f7074af3400e792ed28283b88e619302ee2a50ed725" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="4f179f9884325b11e43299708f566027667ae149b0e67c7ebc5231f21b66f39d" name="libfreebl3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9333d493b031ab6525827fba14d7d6a2e56b2b74a4e8ba744aecc6d39362a70d" name="libfreebl3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b6e21e29d38c130df19062ad91ca041842535662d409709b8fb7d443bf664829" name="libfreetype6" arch="aarch64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="12f56a637042c9e4537ebd2e29bc436fc291d0979ef44e54f636fd96bf760b58" name="libfreetype6" arch="i586">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="0cb8c459bdf6cca516a7f1780adeaa60fb8bd3a7103df19e1fc7d0155b2d0619" name="libfreetype6" arch="ppc64le">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="4b0d5a4cd016d0aa901d612843269bb57bffcc6722a54961268d369fd9cc7b48" name="libfreetype6" arch="s390x">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="5ce39e151b18b7d6e115ef271dc16165f00e19b47e194520cd496bd8fa3b4ffe" name="libfreetype6" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="2193faaa1f76e226a8c3a085d7e1d29df788a2ddc4bff2eaba2269ef7e4dd145" name="libfreetype6-32bit" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="53f1ab0efc602c20a430937ad45b1b619800caef7b98d1648c34fb759ab8aca1" name="libfreetype6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="53d06ef44ced2c1c26f030997e864af670f63fddc38095f2f48f0d9506b976b8" name="libfribidi0" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="357a5a8ad1eddf63dd292f784c22651cbf0b49e43db413ae7952e49620ee1e46" name="libfribidi0" arch="i586">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="5f9bd58fc2801d5b0abb7a3eee1537febd4b3bbe7081233b52790d368a399cc7" name="libfribidi0" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="1dfa129c1abe9d5dff8177ef440741cc141f7c44baf7b3c75a6a4ff52191e44c" name="libfribidi0" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="abb44bcc438f43916420b26b6e77d258856f81c710df852f1c4c7eb82579d112" name="libfribidi0" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="8626d15b0b868af7115c7e68b0184ad834cff15bcd93619912642c0570202566" name="libfribidi0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="80f58c50a803c1f518c6a7a3cc905768dedb2faa7a3c74acc79ff6379c091957" name="libfribidi0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="584f106e943d79e048119056b30586519d9958560437509d096598acf9375f78" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c250073f675db674377f87099a2576c4b2cde60bb7afbae6d9704e7254625a1a" name="libgcc_s1" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d53a0f111066e3271c57743484c7595e97bbed0491a84faf1307b6004820269b" name="libgcc_s1" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b8736e10861ee7a215df731df1b2e3ee0bd61adf738eb932a8a4a6d6b6e22ec3" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7a5607393db7e4f36bec29f8790eef187ea2ab5749b0e15746db596feae7e7af" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="28a0052f9cacdc82903788b48de9a786f533d60bb6f6658bc75af27cb71e966c" name="libgcc_s1-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9abcbeaca19bc9699ecf892194101bb8ac138a50e79cd6702f1a6422dcc2ce30" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="835b98612d42c9353641fe2bf51a6869f769268832ba01ebe959b7c6447aad64" name="libgdruntime1" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d5fb1cff295331d809683881fb77c13ccfbb5201922142505581a6d9c2b083fc" name="libgdruntime1" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0bf59181e64736a79bc68907d0be71fa7bc13750fa28a089009a44fb47a2c34d" name="libgdruntime1" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c01cde7c5655d173fc951f46c8d709f25431c728b206294059a0b5f2f2f97e49" name="libgdruntime1" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6536f3231d53bb95036f37b1ea19a7ad07ac12d5b19aef6b3cb9c1d75128c00e" name="libgdruntime1-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="4492aaac1ee16702a3a01dcab41a26f1f2d73bc04fc44ae3af911199bf302ad2" name="libgdruntime1-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2af3a202fae9184b0a82a2241f9f12506674ae8cd7e13b0586219c0ca9fd2919" name="libgfortran5" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6e5be17064d17e0e8c0036b4b129837722b33c5a87668cb64786582444cac062" name="libgfortran5" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f24155b648952d316462ccea62be8dd677ebe277a3ce3083ba21dce266d394f6" name="libgfortran5" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fe2b579e1a5b2f30d94492908d6e85dd038d5e7b85b6b38723bdbef5dd58e2dd" name="libgfortran5" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="733a4ed50378aa3919805ff9a49d86596f283c77db65eb9492c16f5e988d9020" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ea69be2287d4e2ef5634e34d9334bcfccfa3cade6e26a75e91c080bbc79a5031" name="libgfortran5-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="33b4f381e9f987b18a36f939f9749667bf02ce6c648151e566965c37e21ad6fc" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="51ed63521c35d009d6ad12e7be55de984f9c8bcad72260cb74c8b99390e4a7b8" name="libgnomesu" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="6e30f401bdad08bcf0583f9aed36242c33d961953c36315c5052032288ea6aac" name="libgnomesu" arch="i586">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="fdb3e3ecf048a81781deb108ff8907447c50207f2bb5e1a6676bca55610c29a5" name="libgnomesu" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="b012d7d746700918f2b1ea20687db738ed2049932b04f3492124cdb5a3902bb3" name="libgnomesu" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="36bc17b388d2046eb9db165051d1cc2713914d0e330b14686a8d03dc3e1e43af" name="libgnomesu" arch="src">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="0d3363b164c74a47adc63025b1cfa68406b67af6a7b96ef1062073271dd4f8a7" name="libgnomesu" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="af6e5a4b158cfa106367c66e6dd25ce46a3cc8a7346825667b507cc1897bb3d9" name="libgnomesu-devel" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="cb1cadf9c17eb20583f76d9e4533db48edd49ff7d58661d29f55353ab6e8d614" name="libgnomesu-devel" arch="i586">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="f8c67ead921f4cf5cee4e34ca6fb5f3fd0a926dd96b35cedb1dade7b214ffee0" name="libgnomesu-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="b08d978ab0b371a1d7b36c0fdc6590a247cb1bd1d6f377d2f0625843efc02101" name="libgnomesu-devel" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="0d703e96473dbe8f569e3f386190e2af699ced52f25c14d190c4063d7138ac09" name="libgnomesu-devel" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="bf5a87a4ef21af1064759366614fbf9bbbff4427506f07a1958d3c857a252a53" name="libgnomesu-lang" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="afc6188de55946a77bdf0dad70bbaefe2c72f586db466942eae8636073af067a" name="libgnomesu0" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="2748049f6b9d329b298c542945be4ea2b5e76ebc230c9a54c3aa6ec500337890" name="libgnomesu0" arch="i586">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="a1de672564e4b5e831fb65750d375484f8c1427f553f8800308784f298bbce72" name="libgnomesu0" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="09bbfe4b9d215f65fbad97f497f8798749eb42e87c0ec920a174c7b331286d73" name="libgnomesu0" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="53b1ab60e4e7dd795c4ab2014cd69438d5a86b5590d2cf9ee5ee2cefcd360215" name="libgnomesu0" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="a73ae21bf8f035b316e107385b21cf739a42ac710ca9113bb0944a4b783c0ac3" name="libgnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="f1e1a630e5cd8a13ea5ca0736467c57b10aeb27e43280e2203f8273000f2c422" name="libgnutls-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="7c3f98634ca3e40de472f5bd672c81e18f6d86d57dadd2ccc11dbe5ab3ffc2ac" name="libgnutls-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="40842d1cd4a69596e0b9c6dff4655b7c05d8340de41eb8d9147b55feb1b8e851" name="libgnutls-devel" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="722e258cb277b8544c45d2e17ed94e87c1345e325d3ae1b63363f40cb07b645c" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="abbef61ad63d50ad53361512452341f28ee4b620112340d7b07a4f03b37f7d3a" name="libgnutls-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="e27026346f7f0d0101b93bb483e1b87b78432614919b731686c3e7b10356fdf1" name="libgnutls-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="b6989a0e6af6c9bacbe72c70df917e1d8cde3331e9cfc9225a76eda4d559edbf" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="508ed228e97e89690f629ed7a46a0300356c2465332d8f6b81d8bc7bfededb7e" name="libgnutls30" arch="i586">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="4add525336c1885a91a4b2c6a959b38b74ed36ad293bc0512427cf0192f0af74" name="libgnutls30" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="04f7ea690ebcbec8118a2c6c29abcc9f170efd5836ecfc90a664b412b6747387" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="24de31dfb56179b70e5833972843e932139c96734aad7d16da83b90b4e9a22b1" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="82241410e040c178944a52af6e6cb725c029a60fe05b17c35998a58e4ad56286" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="2b13cae0a290df9437804b84c916afa09f6b0a3aafac1da72df7aa3722aa6270" name="libgnutls30-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="ae9c6df9a82eacf41809e0b10bf08b08625b5ab3b0c1d0b4f43fb384c5dcd2e3" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="751d0a335ff7b38cbdeeafd1f866125a722699331aa9bd56a2dac9115d8779b5" name="libgnutls30-hmac" arch="i586">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="bd9959d33f80e2150fff723238fb4ed038566d311a170d16699be460227b0a6a" name="libgnutls30-hmac" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="eed2583df64962be9055d099898fe33262b0b35939714b155e8282ce369523f6" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="58c2c8cae670166f892ead1cfb282ddab0d6dfed78e0f2387709f72878f551ea" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="c0d36538a8ac58c0743089be5c57c1de525606e12907db6bbc77b7715f3dee18" name="libgnutls30-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="b5c6675e0d837aa5fd3b32847db1b5989cb72e4c60683ab4d1d40383e023bff0" name="libgnutls30-hmac-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="528859123df3a6e44638e5b141b172805f87a766ded65074a1774220a11b7e9b" name="libgnutlsxx-devel" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="a6fe98613cb52a814445a427c9d130d193fa1b18c2799d56915e811f4d93f7a9" name="libgnutlsxx-devel" arch="i586">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="ca7bd5185ee3bc2d7c61479ef1ee733b157ec602f0a4a246530c3ccd87b85d95" name="libgnutlsxx-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="c39eaa12610411dd2fc20d43435d365555c8b70b2f3e9edfb2f1633a7d5c0eb1" name="libgnutlsxx-devel" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="eccdce0c57f09097456b0982a6582aa961dd3e771183428b6fd60378b8a4b2e7" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="9e9fc245994fbc78623b66de00dd54975e2560d8789075fff75541bd0653c2f9" name="libgnutlsxx28" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="eb1599c1d55d923f3c7232dd236ff9d59ae8cfa0dc9082ceb1345678a2bbdfa9" name="libgnutlsxx28" arch="i586">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="1d0175ab8c2e07f1c670232cb86b5325db131e1df03508faba2b221f646610fe" name="libgnutlsxx28" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="ac4ce622fe3669ad6dd6865fbff04aa8488419f8e3fe6760775c5d210c1b269b" name="libgnutlsxx28" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="2be97fd0a1eeb6b2b88343cce56a0fbd065caaefff61992584dd8703165a3ac5" name="libgnutlsxx28" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="6.34.1"/>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="3f716b8c9fb5455621aec89283586f007e763fe2b24e3585e30c99161693aa59" name="libgo16" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2ebcd893a17a46d52a8beeacf44a8acc7f806575b0d1594746b35741b28f72ab" name="libgo16" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6d1014c7dfacb32516a4b0f2dd3cf1242e75055ef4a806d546c7cccf1594fa00" name="libgo16" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8d0a46269a4b385221f973622164cbb8193dac6242f5282f6ff53e27bf24e314" name="libgo16" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="813e85a191d28762d34c99a4c3cac0daf837569fe597bb5ad9847649c1dd30bf" name="libgo16" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="43203f28e16eb379786a2106b4d46f864c18d98ab25ed162d16063a10cf55283" name="libgo16-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b0e7d065f8d4a08c30f3e2acadb1d4abcef6d88b4d3926c9f8f7185bdaaf8b0e" name="libgo16-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2518f68596d30baa7fab8fe4f8f7a6b4535959e0b3146d5cc356c450cd72832a" name="libgomp1" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9d56e69d1110eafac5ae0e590e89023e9ca0796c1a7b90c62907b6a411bf579b" name="libgomp1" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2d6639fce7c2e5b3243a1d7e05bc28f022256b7aaf61c79482d7026780ffd38f" name="libgomp1" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fcde4cdc96bbe4b5a23faf3177bec4af9ab2342d5d140b461cf8fb6dcfd25c08" name="libgomp1" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f6f2489dd8690a63c26837a9dc989f94ea6f194016a9c5fd165e4f6166311904" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3de4eef126ef4084915a6de1f887fae62e2dabacead84ac872c939fcdc561d09" name="libgomp1-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="48164a12bf418ed9fa574fb26188bf8fb9dbfb00931b42e6a84ee39fa6ea173e" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2597f7c63d1b87b9b581529e6a68f2679b0839669847bc50895aa799e7cdca44" name="libgphobos1" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a1c5fff6e3437e0f7b458afe1d0fb3ae032f2f17d523869524fd289e92d63e34" name="libgphobos1" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7665c7c9f66f4454f714f8147144640f9500840fe34929e8d3175b9f92d3dae1" name="libgphobos1" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="e0e04ef9de410ff35d9b290101098397ec135cae158fb83d6df5086a41eef0f0" name="libgphobos1" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="39c008db475a18ba180137e0e4c2c4ed6592105f2bad91bf079b243d02a48323" name="libgphobos1-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="457dd5926aeec90021c6727e230caff2f5be11d460d762c94192038cb084cfce" name="libgphobos1-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2db7239d2d033aa50328ba89917d974b5fdce6a38dafdc860409c962c08412e9" name="libgstadaptivedemux-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c0559a090e104a8d260b4374ef31687efafa3f2919dd50d9ce21d11ef3d997be" name="libgstadaptivedemux-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f9e9918d3310be4a26877b2597aed897e3943772a8167cb9ca53bcb57b871a96" name="libgstadaptivedemux-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="1d0a473d15eb463f4c3f83ba54b8582ed2d9a842ecdd764ede19ee7fa1e1ac16" name="libgstadaptivedemux-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="351187a107903515d1eed7b68a71633a2b4947b8ce8f4e92c34ff37c27d2f016" name="libgstadaptivedemux-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ab011573e823fac00aba20dbee8314b33e7bb0ec8c2b53dbf387c219196f03a6" name="libgstadaptivedemux-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="958bb628a9df727cefb7527a5099cdfb3ff1701bed0cae012da2afbb977ff26a" name="libgstadaptivedemux-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="09dc3913bc0e88534527d822ce5e8f8c1ebd6a932c8cfcf974812381f3a63cf0" name="libgstallocators-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6fb58181d462bbc7a83540547ec37eddfd4fcac75dd5fccd688dcb11631f726d" name="libgstallocators-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f48b6991c62ef21ff8c60d86d0ea7eba9dfd70a4efa00da90edaf6a87b24f1ee" name="libgstallocators-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ff97feb4bd8be36453c07baa99e7577b255c19258910b27554eb0f46358941ce" name="libgstallocators-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d3b2fb83dfa9acbbbe99a40290b9d3b6cf8304d0e84b8463bb1b31e0a103ebea" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="38d06d6dc690369940b60cbf483ce80d2768f56dbf00409801db59898df26793" name="libgstallocators-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6a531c771e2f49fe6ade1acf3f4b79ec428f6c8de8f31be3ea539e751d2ce824" name="libgstallocators-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="869944fd310da72f93fa6002d8172d3a9c78f05e48c2db4f4cfd3a5d373e12c4" name="libgstapp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="115fd49d967073cf2e1dc7a3eae5e43b65c84a6a67043b78833ed2e3214dc134" name="libgstapp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d7084da52e8b5b3bae403ca00f34dab37f3f1995046fd226294c158df4e1f1e3" name="libgstapp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="99381a4b60441a7ec61fa65bf8eef7a8ba4241852ab31ac03cdbc843bde26e5f" name="libgstapp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="61a228c10cd96ee789982a92c6377dd03841114e38e553647dae582dcac59ff8" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a5650037004016973a4d9ba08c40f34c0807a4f1a5f863817d3b93f52e466ce7" name="libgstapp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3bafd8e5924c28e9b248b1e09f0685cb315e88e7d3520998a38de07a188aff87" name="libgstapp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3cf31e702b88326a780f5421f5b684c63e749f9e604122e11ae56171afd8721c" name="libgstaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b0b0403554e2a54ba9285b0beb5f9987cb175cf3d68e2496b75700aa5b8d8527" name="libgstaudio-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="89b76113217b0549da88e9b546b2adeefc44b94e7c7c0e5c50e04b36a892640e" name="libgstaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9273b1e058729d8a7f08216fafa91b29f97e31174e83af77c7a75970053a32a3" name="libgstaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="17a25cde2e5681f2ab6a11cf45de5f143222d7e63a8beed67e3a24e2d91ee3dc" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="90ad64856637d3b946d2b7a7c1a9d06ce03281a9d681df81e4a5aba8e5eb2e69" name="libgstaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="639b185d6e461f70fe6d4a2495c97a3ef8bd99c131dde3b6568f2511a322c1e8" name="libgstaudio-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ac4f25ce63a2606984d546d7cda30796bcfe06ad2c6c72e3c09f6677bec3561d" name="libgstbadaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f9fdef8a62f24f7fe847d0120a8f50c1434489e3d5f02e7a2f5d81bb9bdeea28" name="libgstbadaudio-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="382b8fdf503caeba8ba59c9e268f6b0b2424db43fdf6aed46e9e9053119229a6" name="libgstbadaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fda0c0b04d02b057432186e3ac280b31c94502229cf54a6297583bed5b2b70f9" name="libgstbadaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="342ad74b2c39a7d9049d336f9c35aaae42de9ab73dfde2a734b93776a6b34782" name="libgstbadaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6a0c57f0561deb7b749f6a06601cfb3db356deafca4ad798b8adbded6d2bebd2" name="libgstbadaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="260c5065e98581eb0c6a1aa22ee9c11d1aea150ae843ff0ffda5e635f2417ea9" name="libgstbadaudio-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9d9790253021370b8c3b06646c250d422ff551d2f5d0a3f6f8226b93aad870c8" name="libgstbasecamerabinsrc-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="04685abb9d928bcf29b9581543a3fdadd8009a2bc0e73574a7bcc7b06d7b4849" name="libgstbasecamerabinsrc-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6eb9efc8563cdfdc5b23da537b35bc70cc5d84103b53250c3218aa1798d119f1" name="libgstbasecamerabinsrc-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4de5d17c737508faa3b97010e2946f5152160323cc12c51dfb67a6c6218332b7" name="libgstbasecamerabinsrc-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c1434f98147abe7897d769b91dbc20af270feb52a4eb99612f153049b034c1ea" name="libgstbasecamerabinsrc-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="d18eb2be28b7265876be0ed1f431356b62c66817c842f32718fe79ff399a300b" name="libgstbasecamerabinsrc-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ffe40fe01c2d4908f8160ef863e0c8c7d930bc50dd4a7b534a4c652d02c68236" name="libgstbasecamerabinsrc-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="de60b463ba5352f2683512fcace099a4b6a7bbf1f300deafba0276b09528f4c8" name="libgstcodecparsers-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="55188331b678b2b6f02db1ed89fe6f047e3388b630e7f98b4ac17360a0184de2" name="libgstcodecparsers-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="38700ff09ac1e19d905f441ff835fe7e92c41691d52f647cd35e19dc6629c9b7" name="libgstcodecparsers-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="5ea45ffea2118a51e829943e2866b1404e7fb482c1ede92bbf8dcd96b5cd9061" name="libgstcodecparsers-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c11216b06e0ef7955520787c5273ac6746323b3fa8c262b2459a06684d6e3d66" name="libgstcodecparsers-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e4629388aaac6a47c1d3e85813a018836c437e7fb44c77e56d26a23ed9f1cabf" name="libgstcodecparsers-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fcadbd9098ae1b79d98eeabb9cde622c5a7f091c3d8de3ba456969adac4c89ec" name="libgstcodecparsers-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="40235f5caadedb55214754c6713399e8bc87c469a0e2dbcc9ae0003b4832b75b" name="libgstfft-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4adb1c1cb84aea08d52ed52b2c3c75f451efb60fe4cb5e45a35477a15d344281" name="libgstfft-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d9f73dced04dbf751e47111ae9a37814ce9c3042530020b403d28ba0d4feada5" name="libgstfft-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="36770dc02f865f96234e2b6636298c609d3bde9833f28a9acf0dae6c6ab54df6" name="libgstfft-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fc42d8f4b4ccc30cce13aef05f68416a6cf07bc75c9402aea56e1eebb88184b0" name="libgstfft-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ee02beec1502889bc88429879c7653a347356433a57710f62db51108d054a0ff" name="libgstfft-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b73499083c5f43c98ffc514dae410e179022dd78626aca6c82236f3752ef0f13" name="libgstfft-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7ca617d93711f58044f9b8ad17ab86a98f789d04649a6915d4e8af5ed552f8b9" name="libgstgl-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="64aad15bbf5902bcab7199d03379cdb56ceb60a4e713c024bb801e88d7081e18" name="libgstgl-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="607cd4276e62013f74394652e3205651ac5b83d8936cc5b70be2da9042def7cd" name="libgstgl-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="75d6a50d3f8da99d937e57ca559286b8a53e844702940ca18aa2b8bb025cb6b9" name="libgstgl-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3a585e6f249f48e2ddd1f53abbfa58d4017014c4c4dd16bf3a85c31d45454a75" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="53a5064ba1edbbaded3d9894cd7af519dc1590412934fed87f9ff3a2a250acb0" name="libgstgl-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fee4a596d9fb20235b1d7e7f131e2c2553f01980e4ba4b7980c5ff55a9b1b458" name="libgstgl-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="53b3fe7cc77048ffd41d4ba121cb55a4bea3bf08634ba78a9e186c5e133e48d2" name="libgstinsertbin-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8875cc229385f139de4eed0880d3e36b756068ea30098274da1ad4a64e055e32" name="libgstinsertbin-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="aa781c3a934bae454a0feb321d09b4d823d9696b6f7f38a50b27a28cd17fe2a8" name="libgstinsertbin-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e62653d34ddde6e3ee2438989e203a7a5884bd74b5819ed10e4af0678fd3824d" name="libgstinsertbin-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="00acd0ed0f6643ef8b7fe797a64ab1bcbf3163f58d071ccef9c53751a5d49686" name="libgstinsertbin-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="a983fd8b0392c18e6e564fb884d5090a8c0c669355af4f649f8e1209bcccbdd2" name="libgstinsertbin-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fe1bb4ba163f2c464d1f38d7abb290f2a1d2db21b387b4c4fad69709832ffb61" name="libgstinsertbin-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="3d36334185fbd9d289b3f6ac8834ef9b06e0d6730581d3e62045bf54d046bf2d" name="libgstisoff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="22fc9a79ee6289f995ad70f158ce31a07a9678994c0989b7f41b5a1dd143d7ce" name="libgstisoff-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fc03047971874e80c620f45802f2aad9c8542bb3a4602318fce7a1ff353dede6" name="libgstisoff-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4084837d951b7be3bb0b99c3f095eee6ea8cca24ac009aa3a1516a8c7eca9ebe" name="libgstisoff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c27302db659cf7f250748fd04d990f203587c3e8e96379e6a6af635c95a27bd9" name="libgstisoff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="81e476c1f19674eb1104786c6bf56fa2127292d2a5a90425bc3614f25b786ebb" name="libgstisoff-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fc86a50d11cb63b98841043e180c737898b02a9da7d6062410c6bdaa61a01046" name="libgstisoff-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="7f0ffa40e3301fa24fa6a0a19638bb9eaf81a58099320a7e6b18c51264d1f354" name="libgstmpegts-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="83753695ea1fcacf73ca3ac8ad3bbf3ed77f2c79616d7f1d5bc8ef46168a2d7b" name="libgstmpegts-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="38c5d311318bafc0730c51059b207f4127e6b196bf38146390d1efc23d2f7149" name="libgstmpegts-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="59b5a42c94fe73c27f8a9a1799e0c30c856c5f4f62643051a1bfb6123cc496dc" name="libgstmpegts-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4342481df66082a5c27ad4fd1a721c0aed7e9bb96826bb44d3a28525864b35c9" name="libgstmpegts-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="420ca5de7b160ee88a59badab1694e7cd7737200602cf6d6ab86852cccde979e" name="libgstmpegts-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="831fca963b1d076c6813ea205da0806ec01caea030544066463bc2e31f34eb12" name="libgstmpegts-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ea87e239794197d73b483683d12d0f8fa85a22498b356e8065714ce2fd7290fd" name="libgstpbutils-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="586cd6d82961d2316b2e6fd846e1629636ca952c08e2747bb2671628ad239335" name="libgstpbutils-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9abed98c643593ef9616957cad9ec53a42c5c9fc2e8412a79010064af3db17f3" name="libgstpbutils-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="96ace2b2fe7bd4b665abc02369dcdcd79e2b23a5562428325eed9ef7a8da06e3" name="libgstpbutils-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4b06d118fbbe569d45f4f073ef9852d3564131374d78b6abff172549486dfc57" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="af519131386393ac0b826e5e07bd966dc5914525c9f958819cc57d252233c238" name="libgstpbutils-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="55242b3971148c1f4b95d44d39264fc023e39976d4c3d37c002ba6f5a48837bd" name="libgstpbutils-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="5092d738be93bed1d49bbbb3d8a78c74e9b745f946536bde69352e5e21ee82c0" name="libgstphotography-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="cbbda40caf6273ae202d10c6bec314ff62a93827ea2fa182a3a939bcd63e4b04" name="libgstphotography-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9fdf0fb3637692d02fd5812854594175a58e9a088ae6c64e596761c8d7de8f27" name="libgstphotography-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8fb31a0dcac744a8ecfb0f789c512732d04a65e6044e2580e470cf71a6ee7b10" name="libgstphotography-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="1c2a5d8a893a2245f30166ec38450fada51f59f754a8a494ce8e7514ee657aab" name="libgstphotography-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ecb0b4df2249a0fd55967ba20462eb8c6228a7d0e41ce4e71db1429ab7720428" name="libgstphotography-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="d8f2fa02ee94f931e1c5636571cb6ca6fcfd37bcab0db962f9749abd0a585149" name="libgstphotography-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0b5de3c781167f4905b5c48e1edad875fe841552fb98061d27977a5735dd9393" name="libgstplayer-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="710170d9a004899b82843212a24bdcccc850c0ea26288713f5af2b89c2628f97" name="libgstplayer-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ef7714b42338aefc41b6ba17e5acb5cc38d072b47f7918a6191a2a4852784a96" name="libgstplayer-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="04b700728a722fe16eba59662f5f5551d3e9740cd45efb5b8883471234e1cc40" name="libgstplayer-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0b26c9d958f8d0e98a10663600be533cc1a339ce3046d58c7ec0a60d8e41795e" name="libgstplayer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b1de6d77f6703b470481054a3b4ad018695408ffc1775de6d92c69e183d108ab" name="libgstplayer-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="5fbbbcc3ed293fa50a8cc3b1d4625f8aa61c2ac54cd5f1db17d904915f2efd93" name="libgstplayer-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="24fa6369b38c03a96fc21579f421fffd282711a22d8f56e4ba0e73d2facf9196" name="libgstreamer-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="869ceed68b76d1bb6781970ca748ec4832046f8c6bb45f47ba68dc1e33163960" name="libgstreamer-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="67239f6b0acf3c04b76c68e05cab6fb6ab1ea2de4f1fea4a96b44b6340a512ad" name="libgstreamer-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="20c8e08661252d39dc782199395e4edc1c23985ae4d480e0f1b2bbee5e2810e5" name="libgstreamer-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="e9cc57354277fcb01c58b8bd91659591b1c2060b5584edaee795df1bba024350" name="libgstreamer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="b50f7dc5cd1c7aff1d3333de98275e2e39662937bb547e57c9ef2c88d36058dd" name="libgstreamer-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="4dea414c4d6f571c36ac8eac75e031489f79906c129e378b9273fc8f89a5100c" name="libgstreamer-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="161ba213d31f3eba8edc4c8097f76e2b1a5d671befd546757ef393fb45028cb1" name="libgstriff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a792b764478d4afb9974a2b3b612ff87b28775dc71869e98328db74b878a121a" name="libgstriff-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fb6de8aeeece96cb41ba297405334d41f0a4320fa04dea10644bb3ba58237700" name="libgstriff-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="83a2e5d38d0e2793bf7a917cfa97411f27407002ac0583f4077cf829f078f713" name="libgstriff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="12340dd4a632166de66fe18cfd50ee2debc8d3ee7832d2f8a057737983f3f3ff" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="93ecb9032994e32bd32abf6d357fa0561bce3391ee53a88e447b91ecad2c4465" name="libgstriff-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d07c484d452b333ec891db6c9d52481db4408fba3bbab4b1ca631546ee3c7413" name="libgstriff-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2ab5d8cc361928428c31ac68e0f2ffeab5107a7be90fd837e21faf83c66363b4" name="libgstrtp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a15661a2a372233dd7bfc9287c7ccc372d903e62d09ae2c282e48f4d7fef5a1b" name="libgstrtp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d0fe0e83886772dd50d7065d3fe83b57e216e5b24271e2d80eef5ef58df0623c" name="libgstrtp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="cd22485f576972151955a40abcc185944e5109997f4d031b053ce31cf7353fa7" name="libgstrtp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="62a20c350c8562c452a9d863d9bf532b0011bf1c46e34c005d7227d159e8a32c" name="libgstrtp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="69e0965857e7ba8ed4920b8a2caf3e1d4996a0a394263a92f6c7658685931b29" name="libgstrtp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7af418f3ecf3fd62b844f8f13fe4ecaca3c22cbbca20064ab31c6ad5569bbfa7" name="libgstrtp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b99a8d1f4b61eacab6794cfa27427f1235afef11b432e84ed767ecb05fb13dbd" name="libgstrtsp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="45c01f06adf4b18364e2876ff0839f21b67d40f68fd80818f162e1d267c5d8b0" name="libgstrtsp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0579a09e50ef985126241ee2c1ac674bbb1b5ecfc7fb32e1834dee349f9ba7a3" name="libgstrtsp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4aaa9cc456387047cdb00679970dc3030061a5c807fc2dc664b1f21395784740" name="libgstrtsp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0b370bc481efed3058c58cf3a09befe41c683f1f23e070965c17e365de77ff77" name="libgstrtsp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c0eab4c0f08174563fcd7ca2491de47989961dad3ffd1cfee5e6576f1e35f6c0" name="libgstrtsp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9cfa41b3faf188917fc4e7e9ed8166c8daf04e9cfc6610c82eb6c1126a9dfdd0" name="libgstrtsp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c5116ac3a68a9ba9160c6ac3be5ce7c522d18faa3f7a4f81b840d24f4adc719f" name="libgstsctp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0bbaf48187dd20e88e19b6bc0e37096fe77ad57ad4b4536e9b48b1426c48b1b5" name="libgstsctp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f5dc5d64ddeb40f1c363cd5cb04a32c1f4b67488f8d5cea3013cf1827028b7c6" name="libgstsctp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="420725e505b4e77cc97300d87a91ab0c5c92a0f7834d4dacfd6884b18d982df6" name="libgstsctp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="daa73450fc559a2c077a428210c087911f79eb015dcbfe93ba908b0c5a509399" name="libgstsctp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="93cfa5673f113b0ba77da9eb81420dd5803841eb7ff8b0de3ee46d6fac990ed2" name="libgstsctp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="499904000ff30bde278824fb83b2a3946164562fb5bf5f603283a70228446db3" name="libgstsctp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="d6eaa20b0f284aab3543fa6dfb33de67ef6f5bf69790873748f5ea67a0b36bf6" name="libgstsdp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="cc9f8bce16c4e94212f846a8d23a665405778669b5b64f904e3114caf08b4831" name="libgstsdp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ae20191a72769db253eb676b7a808d96daac340a213a9ed84fc8a43a66d1022c" name="libgstsdp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="66b6c779438003d121c639faf97cfa088d0c99d98eeadb669b85e7e82ce5d2f0" name="libgstsdp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4a91f217cb35f4c65d042afe85c5f7b169240d9408db9be04884ca4a3d68b703" name="libgstsdp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="73d6b098f4fcaad44aa56c5f1252a80b5c0de6b284abd688d1f4fa00906383a3" name="libgstsdp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="712be06633bfa5c1485310989f005213683dc1332b19ae1dda4ec331aca42892" name="libgstsdp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a6d6f44c37ef41062564f8c5fe1ff978388224a362525e896754351be7313fbc" name="libgsttag-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="09d090c3829f2ffa3e8006e615cab237ad31e461859953b40e3fb3a5f55effa8" name="libgsttag-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0eeae242791faee80ee38d22073485dac2313ebb14e318b46772768e8c4179f5" name="libgsttag-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0d0c7ecdc76b93dfd3b5a2f900529c902ec344d845a5c8cc8338ae24349f8b67" name="libgsttag-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="df75ac9ae88748c35b08b4b8dcf245a8a03bf8461399fde33ba1d2fd0fc57e04" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0a81a45ebffc05dd7be25e1d71e91a6d7b6bdabc27d6edcbe55a261c7f47f4e6" name="libgsttag-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a177e60c4e36f464d9baa33b69a774aa9cdf4e9320c22b88d6324228de063351" name="libgsttag-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7921c74b8fd4546de404667070a796c92a2ca9372087159e8ef36f98dcc602e2" name="libgsturidownloader-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="5f64b572367fb726f2115623b275e9d7be1a6cc73aeefb7b600149498ae08d1f" name="libgsturidownloader-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="d605ae548f3854f582b18d90fbfcc5052034b0f501bd7fdc9309ba24cd50378b" name="libgsturidownloader-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="a10da6f4771ef96e398a43f9df30c4d19f711a03ae639fdb0522a53f977605fc" name="libgsturidownloader-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="47772756a14189e683e0a27df66a479a68dd0201aef1adb54599f27726ff379f" name="libgsturidownloader-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="17aff8a8652e3c7916202a3aecfab63629b5abeb4dbfc39e6e839df7c399ee9e" name="libgsturidownloader-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9e20101f3a20d2cc494ba7ffa5d44a48f1d87e0dd04ee80ff0ca9f02493b2c2b" name="libgsturidownloader-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="355f25e29dc3e8a314229f57e70a4f93cfae239b8d3db4d9cae69748efbcb71f" name="libgstvideo-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0aa36bf7cfd710622d193485847b9b87898b07ec451cb12ca09673b75deb366a" name="libgstvideo-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="56912d001819cea25dba02cdf82468b30c5e5f60fc42957dc978d27e39816374" name="libgstvideo-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f536528bd19aa00cafb4f124cdf71df58447fb4c990c914ca37946d9ad9ada3a" name="libgstvideo-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="bce65a5eae421295e4d9ff6d5d2df9dc67523df14abd54fe976f8ba7985ef088" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4eebaf11efd726ca39f5f5a883b3132e630492e9cec50246bb02276130b945d6" name="libgstvideo-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="83e2764a33634f8d98562b232c61ba870120b9e772918eb5770f28dcd8954bc1" name="libgstvideo-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d5dd4a48e1db49cdd53403b85a90b01a32e157d970eda405778c9922c5c82488" name="libgstwayland-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e14a314871279a0a54cde936e0e5a01ec921049f297cf34986194300a7202f35" name="libgstwayland-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f43473baa961b427bbc3659673af759f171a1131c861aa12c20e3c6ee4b1d383" name="libgstwayland-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="96b199202e7791e062ab1f4ca2fc8bbc053e135ac2d3033c7ceaca89e1c6ac59" name="libgstwayland-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="961e98bf799d468e21651483c244e6b493cd200a598008cc7b03a09b2e4039f8" name="libgstwayland-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="45753d405cf1c4f9cb976de05a04dce56c13779aba267c5147d14a2a7de8817e" name="libgstwayland-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="7ca1e7a835b191c9ffd1a128c462b5ec034201020a42ff1bc4df916fa4e703c7" name="libgstwayland-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="bbbcc430ffa0b42e48fd7fa9cf1f8f01434bca28f38c907305d48b70eff96bc0" name="libgstwebrtc-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6f0a80860db3517192445848d777030f1a3ebd75024328a542c681bfa810d68b" name="libgstwebrtc-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="82403320ec179874507d096c1f43715769f72705ea134339f48389b2e411b59f" name="libgstwebrtc-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="64e5b1ac1829c0f542fbdb1906ab37654d700afb7c65941165720c34bc1fc798" name="libgstwebrtc-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="29b25949619f2a35c5ed6ad324cbbcd322c4df67ee1e73daf8d2367ccd4e26b5" name="libgstwebrtc-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0196ceb7706c7a648a6dafb6fe0b4cdf096a17101943b435a17fad76121850e3" name="libgstwebrtc-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ad88a205d35a17f7f55e69d86e5e702181534cd464e8ed066cfd08c97071c26b" name="libgstwebrtc-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="bf6ef94d5940a47d2e39ec05322987229aae5839c783c939397ae20b359878ec" name="libhunspell-1_6-0" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="d7123adc6cf46f84011afb039a93300df8d22043989cc418e2533970420d6b79" name="libhunspell-1_6-0" arch="i586">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="9ca41be42ea23f0c222efbbe67a00819ee0b51e379a47855e049995009fcd19c" name="libhunspell-1_6-0" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="509566c3999d4e8aad8c89d22f7297c604ba82242174a65906b9531ffbc675f3" name="libhunspell-1_6-0" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="f7fa37c056bb97036255c0f1c3ef8752e40203736dc399076585c8b2488b65cb" name="libhunspell-1_6-0" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="bdb9fed09b2a9d0a30db89cbe2d474289caa6b9cee9cb8f586231cd7e9137be2" name="libhunspell-1_6-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="4cd9c1980290df44aa6104300c0f9f1987c82c28c703441acef691b06a0f8524" name="libhunspell-1_6-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.6.2" rel="3.3.7"/>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="260b94ce6facd04f44605aa1fc78bfafa07b2eabfd5b8d03da24ef82c142d84d" name="libipa_hbac-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="20f60fd40643896e87de657182fc6312b10a675ae627e412f1374eb9090ad6aa" name="libipa_hbac-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="602ecd8813ca6b3d04eb0f7fad349e6c3a37d0d2b5e77c80dd6d46ebd515dca6" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="968eb52b062cd2bc58d3b01a1d00ea23cb196828b29283957a9eb74a914374fe" name="libipa_hbac-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="c731d3cccea8fceccee507c85a0206af4c4a15d5e2ea0bae6c46ecc9a6db5427" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="6942c28f6a59b3a435c36cd75961a10e29b48631c02981317986a1236f9085b5" name="libipa_hbac0" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="05d76da2f87ce709650d1a1964a827c05e81278b8fe9446596f297d466eb7fb8" name="libipa_hbac0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="67094c2c806eb2034e07f3ad19f2475b73cf279d84539f96035b39ff3a4428ee" name="libipa_hbac0" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="9bfa5037207d7af245461a41cd03171d7d1f86dd5b731d1e3349a6cdd3b62c82" name="libipa_hbac0" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="e2f10209d996d7c80f4d47f61d39e193d53f334e8bb68cc0f36a5827319a1275" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="0db35e7e01d2a7f84ecad8b5c954200ba7be48736efd8e4b21f9ce97fdada133" name="libirs-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f1c522196968e587cecd764e800629048ce0950a3f9d8f156eab8a223f091ab4" name="libirs-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="79198269961d1f21dbf448d4596d877532e8bcce39685ef46f43f1a5bf9c669a" name="libirs-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="04c7b14dc1e612eb2a2806a27d39d9e92a2154da20959f96476eae52f9d4ecd0" name="libirs-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="4bc1932cfb30c151dcb745bf2d6d08b11f4580ff20ec1697bc097aba102fc080" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="e2cffb93ae729ef81408ccefb76fed773102579fb53acecedd42f7ee09ad3c2f" name="libirs-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2d3881831bbffae17902872d6ee949d69a8d7c093a9930581e8f572bf61f1d6d" name="libirs-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3e8ed3e953a53176675e74a2820314e366e1a4a9b9fa586890fad168c1d63b8f" name="libirs-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="58edfd7cb0c8edb7b78face9e9c85a23ce36490eb128763a00cb0c4c39c510ad" name="libirs-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="190a33fb5671725dcd0fb6e3f3fd266fc283e75449f94712f8c2b6e71b92a395" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a2086957adb94ceb0d0fec0ef9d88dd7e0f680d1c3cdacfb975bec8f23ab3072" name="libirs-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3918fefcc66e065633646dd67bdc2c633b76d1c3036fd8a653e6710a8002623b" name="libirs-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4acb99eb9a403e52c1f75e9645fb507e91fcbcbaddca4ce4358d317215cc5f1b" name="libirs-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="fb9b74d7ee6451e51ab8ce4e41defc21db07bdede0e67a6e0967b7f3928f07e2" name="libirs-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4bcae08bed249cb03931e99d74cbca77fe71e1e3a9ec024d4b385f6a0e57240b" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="be3095eb30d87fd847c1c52bab00ffd366143fde0831d212dfea607354c7fc6a" name="libirs1601-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0b72b88982f2f251f209786930703b7d0f5d0a3165957b5e28c4c93bbdcd4be2" name="libirs1601-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="14f661eea784c2f2f4656b0163359f21083f8273b30fbc8295ebbe3846d33fa6" name="libirs1601-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="46f2ee06eb9d7f20b527a838c7d1eecca3f423756a403933589de13dc44dc772" name="libirs1601-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="85d66d23a268779fb5a5f93986089e7ba63ee88a4b01f2c1ee3c8f518be76784" name="libirs1601" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="d3f907d40e264bcf0e7da4efdb1b162ee3091a090f49dd7eea6ae5075f3130d8" name="libirs1601" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="1ecbc3b5eb560996b7b48e6d1cdebe30daa91c9bbfc48f485916140a6dfac1c8" name="libirs1601" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="bc379f8242cad2f5dbeb1b3c6d6fba060c3790d11ae7c930cbca91ec0073c905" name="libirs1601" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2fc7c03b302eda44c561922cfff24a6029cfe13be139c39cc01b9769ec7353ef" name="libirs1601" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="59a68692db830042fbcab9ed54ebdf17c4184e515a6959fb949ecdeafdd23450" name="libirs1601" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="ec935823f9b1ef01b40975b506373f5462cace0340a263965448625673922c35" name="libirs1601" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6e944035f0d0440b5ec4ea7ae427f1bf76e47b84fb0ef49d6de916123a40c92b" name="libirs1601" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="93b1d3e52afce2972e2e8a336eba92b8f273162c5153f40800df35697bed04d0" name="libirs1601" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="e12d37edac18ed6262bcba3e55506fa5ac2a48ba3d6eb333b6614f67ca1c74bc" name="libirs1601" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a62291a780f1acd0f8c066f0dfeb1c8dc0845c613fc3b9912eb15d0b4e9c2ff5" name="libirs1601" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="33a5982291e25c74d8971d2cc9571acf64ddf8245d519ea7d771a9c4747c5501" name="libirs1601" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3d4b4063a035774b1b02b7d0908fe0cef5d8302815ed7c7a912bc3c26613a6dc" name="libirs1601" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="7044b92c3214d0d894c3ba91a5325c47437acf113d456af57d03e5570ec69f8e" name="libirs1601" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="50077793b668617696ba48e48f8bee235ed8a59767233573cba27c3d23c4c3fc" name="libirs1601" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="ec1466b22d7f73ff7479948c3136747c00609ee560d948785354e9d3db88c522" name="libisc1606-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="250194f3e013bba49e2fee737b2cad3356e86da301196c9b8f82b1df5fc0cc07" name="libisc1606-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="365a4b2bd9128d3312cc92a78371441ade372476e185f9127238c81a480974e1" name="libisc1606-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="cd6f99180f72cde4f88394bfbdc9f180524b5c47c781a6c5f88510cca9100387" name="libisc1606-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="d7a69aa187fde6c944eea8c5ff37b5d5f3b690c4221135698f753c2b12223d64" name="libisc1606" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3fe301d10d1812e1c3a15e958886ae981cadab0a9d1570f2a490bc2340ac7b16" name="libisc1606" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="996c95e1e2a0eab857923ebbf02771836cda37766cf4e8d7c1874675f718982a" name="libisc1606" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="42bc8462ff66d1744398d91d2be2072a13cea2c24fe1f51eba2fa7009f530329" name="libisc1606" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="cbc865b4b47071acf36321d854362c44c5a9d1561c1fd14f896f3217c0b71510" name="libisc1606" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="92330c90bb7b74d340335ad1ce9c2e3e1454d630cd0b5e8e4db0346a2f09bc53" name="libisc1606" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="56ab0b920414ee1b875172460e966281dbd84a71bdf73f6d9103f6493a440a31" name="libisc1606" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="75869b77013ef4da1414e24074131c753d09dea88e4b0589d4e41541b0af21b9" name="libisc1606" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="989078df3ed127b852bdf75f07f6ac3789185e51efcd0aaf75f8ab4658215d4c" name="libisc1606" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3edb63db011fa30d13a17f8b7e75c59d076379e06f476596758a1495fc71343a" name="libisc1606" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f199419d75074194464381052ac60b6a53a6702527fa90549de93ebf79cfb48c" name="libisc1606" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="5335f752d34d282f06198d4680925b4538bf31204b0c2716d5de41e846f6cba5" name="libisc1606" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c30a58fb8957039c5122ae575f1b8f543c4660003511dae22a1c465e56472744" name="libisc1606" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="ca51dca7ddbe1b1be8299edabc4d35dad36cfd2735beacb86d50122e75495687" name="libisc1606" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="98dd928a177c2e33de896710cc75c1a2a5a1c25a572bd2b6f18657d5e9566f03" name="libisc1606" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f3715d845cae2ad5b63d0702efadb629638813003e3029f0503d0ec3201f5212" name="libisccc1600-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="41c3eaf67980424e03d2c2eddab400bbe40ed669595390ad1534c2cec0f5eaae" name="libisccc1600-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f46e533abc36d39ff0c6ee00fa93ca392b33c92564fbd1e2325e632d8d6a5b1e" name="libisccc1600-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c8a01a3692a734a674ba351fbfc9b6469a8163689e637b07c608fc0823392508" name="libisccc1600-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c80002c9cdb3935d1525a86a9c8ab8cd8216766f1bf29cbd03d6e65c10fab7c6" name="libisccc1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0a0768cff6aaa1e580d61e0d502791c5cfecf7aca64a864acb62b65cee7abfb4" name="libisccc1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="9a69352e5bd02d6292bd3f5cb70e3e739bef10d3b319fbb032cb34c08c1c3046" name="libisccc1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="97b0d1950ab0ae4bf34d9250905c17d8d40ce60c95fe0533a04c97f99cd59b6b" name="libisccc1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="902bdb54e7ab9f52d05861ca682d97c2bf8f4492110a1900f47e83318a98839c" name="libisccc1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="b7e17fa6e8a8ce9d6005c22c11de34a80c0ec728db9a2f0180186c02fc63fa99" name="libisccc1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="35c824114163557c2c5b59199bfee1996b7138ccbace6e6a2c9b18fd6fce40dc" name="libisccc1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="5b412db35e90e57c91959925d2d745b33d3239b3d834dcec4194fbb1a49d6d0d" name="libisccc1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="fd9c39fd46c37ea57d960f786936808fa9bdaf1db8cfc292aecaf0ad4088ea0f" name="libisccc1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="644b9a67430b43f8aa5edf9aab8cbf09190b2e9a7acbdee2cf860f2d4e7081aa" name="libisccc1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7fcb302d80665551c4c018b1d527dc43038f8af126df901a406ee694df55393b" name="libisccc1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="977123bb9b38b85964b5ae57d7d81ddcd8bd5079116909742a07079ebca7c660" name="libisccc1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="d094e22a8414843b5fc2f52a08fe276310d8d2a81a49bdc5d20f3c1c3e446b76" name="libisccc1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="b97b6f6231dd07f6060e9c4cb7953136ebea0c9ff8410a5594914d85951f528a" name="libisccc1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3c3327c796a4cbdb149fa561c25f096b4305f003ec2edf8db16fa4052d45c17a" name="libisccc1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="e3a7a7175515c0244ee174d390597bdca78712a6d972fba0cf231f860607e4b2" name="libisccfg1600-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c2518a72d387b6198b22879c4e0eb7bef1dae250c2f4963b32a6ecdb3bded445" name="libisccfg1600-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a9ed26640bb798103aa647d7e12f1f9547d130249e9027ff9d75dd10078e5c11" name="libisccfg1600-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="174124ee09f599ece47ba961579874b5d0e8a39721ace9106e81a490c28aa607" name="libisccfg1600-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="ecada96dcfd016edf9554027f82354230503f34374cffe3ad65d04d4b73dbf98" name="libisccfg1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="12e69ba472076fc3e0f6a54f0e76d5565c89e9c06beb2b8ef62d3cf8387ab98f" name="libisccfg1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="b998f1d64f9ea8bef925a16a9a0f471dcec83da406a0d635058fe621f03c8fc7" name="libisccfg1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="e3c36acaca0efc8f5711c8382a90505f880185ba059f3f0a4b8e5bb4825c9a62" name="libisccfg1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="d7384830010bf201a4d21932c5d4a5f29610165c8cbfe56405305fa5c975f9d7" name="libisccfg1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="db0b068e61cc28d1eb3f5c652baf2ddafca2376d43cd2dc83644e77fb8676588" name="libisccfg1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="806f64d533b4feeecba33da6b70d9ed63a29db5c40930e0966275b4aef7d7811" name="libisccfg1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="32c51dd110eaabeebe0fdf59fa373012490f988ace5cf56453535bc37747d660" name="libisccfg1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="dce38d2c405822394be626eba2646d284e8337fd5d33069eab7ab5cf1b8658e0" name="libisccfg1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="b20feeedf504969f8332f9a5bdd3796b68376771edc815eeee42e766afecf32d" name="libisccfg1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="764871762af1413fda061533e0388bd1b3ba4f69b436a4929aa416fad3e33670" name="libisccfg1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="132975319e95ad3ca376f7ef16b6ac1ef1701bf8eaa675bd40ffbe187d2c93a5" name="libisccfg1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="e827e27732f34c21b47cd5d3e00e404aea1ea102f2fe2529c3db98cad8683efa" name="libisccfg1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="2279227b222541207a80e352c0a857831ce52eb5e416566156f4005df9507ae4" name="libisccfg1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="25e8e45d66bad6f6fb4a9233cc6f84d0cbbf088f361dec4282d075f6663cdb9b" name="libisccfg1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="968909850aa1ae8577d12282c3b920542d41be2459b21231673fcded365e0342" name="libitm1" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0114fe23518a286a65763ad513ad5ed091142e06126f009a13d8ae965ed712d4" name="libitm1" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="3fa4ab96d12066327d738e46061a1e0f09eabe64d5ed7bd0320f350696120055" name="libitm1" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="612ef3339d05ba47057ea1980e49e1bc7ec287686a35cdc2c1628179e807988f" name="libitm1" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="45d780835822aaf3368e8249535f7f427eaa181be7d7327f4c69b60cb37948fe" name="libitm1" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="cb5a0812395dc718dc49e7b80ce6f5d645f28c246d794fc6ea36a30c5bdc8527" name="libitm1-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f48da11f5a8ff83d8acc6aabecfd227c27491aa680aedde6ad352c53de5cef1f" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="8befcea4762aa5ec4503402bc0ea1369f1b100f3cee720e233b7f9588a9090dd" name="liblsan0" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ef1571039256e97d6d5fe3351c00a4355d45d1e4ca5fc834f62247480bcf61e3" name="liblsan0" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="223ecf7f295f9f987b9ceb712784ec0c972b72fb8bf0584edc31d51cbdbf40b5" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="13b2825466f87d8427efc02a5e1ffffba475776bdac625c0d3084f5f0f124c22" name="liblz4-1" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="0dd0017c4f106e2c79f0d1d3e5aca1b59bbb1347d0d5c223b5902057f9489a9a" name="liblz4-1" arch="i586">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="6f4b14d80590d5004767cfd2620e01717b24c279b75020fde699d9754e57ce15" name="liblz4-1" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="8d0c47e9a5de6d902331149181fb436ed7faa8d2c3c7f1419ddeef0a61d47f14" name="liblz4-1" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="4eb891b5e57fe711b6f97e9279ca5dabb035ac721473f147a5cc55116ce4eea8" name="liblz4-1" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="03c63b5701ba81b94ab8beb226abf40baeb37f3aa902b829e9ea86e25efce13f" name="liblz4-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="94bafcf1beb7f3ff489bea78acdf9f6de0522c9f1126c3a9def500facb634e0b" name="liblz4-1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="fc7a24ff252e7c6f71d2ded9344039901bffc8dcb58ccd93d3bfd9a2714d59f7" name="liblz4-devel" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="e7a3698be45d517e831dba1a0dae45b6b81826f608d22b13ddf2146bc4a5e539" name="liblz4-devel" arch="i586">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="59af788cb1bad9600cd5f9dbde0de17df038de798458b2508def2b42886d8cb7" name="liblz4-devel" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="0c78926f84a15820d38b0a24da510cd50ecb5113ec9fb618db41a09bc29bea52" name="liblz4-devel" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="2b231c2e3ccb66d80ae3072dd83c8a52e9a2605d06b3abdccc5824b1a8b6b5a9" name="liblz4-devel" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="dc6582feb0e74d010f2833a3af4b92d66c7626e43445692a478c7111bf7b1bea" name="libmagic1-32bit" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="5454af64d64f2f2ef37a7d06fcfdbf07d1a3beb480c943d3378ee91622c0b6da" name="libmagic1" arch="aarch64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="a2887d51311dff98db3d6fc6a61b41003d1562896897af6fee9d468e0b5958d7" name="libmagic1" arch="i586">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="0f72fe19eb3db2e8a2469cef666b4cb572e753bbe9aa3d1f6031253280ba343d" name="libmagic1" arch="ppc64le">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="57ca880603d32dd03b3981a45ace920006130aab217b84a23a7b6abe8db21679" name="libmagic1" arch="s390x">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="3b8c47cc789890140e0646a7bafb240ba143b6e0772f24ee496bcf17308cd3b7" name="libmagic1" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="5056949624123905f1dff2b2222ddd6e0eae5ad3d3b1341758efef71b08977eb" name="libmagic1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="a722cb7fa1b823425b1737ae07c90eb5c60f0c66c1f0b7fb3822a74324d4d537" name="libmbim" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="8056822abb3765780831aa492c324e9588ef3c552687430eedd3783054a71d17" name="libmbim" arch="i586">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="b1a6fcc4789af691c2d73cd078efdb89846dbbdc2a438436ff670f59390bb1a8" name="libmbim" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="bbee771744da55f7946eaf1e6d0df09a2e44196903c418496ae21e0ee37db9bb" name="libmbim" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="038da9d3ceb807ff65b2bf64c9a412b6296f9f06c97ad04160319f3079ae984b" name="libmbim" arch="src">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="877a6647ade9f1d562d6b5b4724694c4d606076a2b18499d4165ba4b2acf1f35" name="libmbim" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="e6630d2b765bc7acc05f029bf4385b1169170c8a1c4abe67f00b10cadc9467e4" name="libmbim-devel" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="8c9d82947d32c81f620990fed013b5914ddaa1c3c921a90cc9ac2992a5529621" name="libmbim-devel" arch="i586">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="0f34052235377577c9ccf0775277c42aa83b57e6ef9fe2b54dfbc7152e171e32" name="libmbim-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="d1598ae2be64b974d7c5b21311c3404db2ae223e9cbf83677936d8debe04cf82" name="libmbim-devel" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="e4c0a425b8121f6ccb2451ae247e716390b8df2bac3f04ba2a95c9cc39c229e5" name="libmbim-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="0f118944767964c56b8e4690dbb3dbf992f2c8605b27297464bc30f61ecad8b5" name="libmbim-glib4" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="63ff4771cd2802925b2325eea3251700d6030b71d7ffdcb0bd8ecb151e253c3e" name="libmbim-glib4" arch="i586">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="c60544f3b7cb06558064b9d93b85f6f331dce773bc49097723df61b584db37d2" name="libmbim-glib4" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="b3066f0c742bf566ab90eee7f7d7266d9fe99a8e297e88ff503b5344dce8ccf7" name="libmbim-glib4" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="c589a6aa369525b865a35d7e7aa5d1a19e0e4786abd23716115c2b39b746ee22" name="libmbim-glib4" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="03f6006d01e8cb4478acc734a2aacc0bf3907d519085985fbc16da348f780dce" name="libndr-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="be0e361fb3c024c2ab56026a1c73ea5e37a99758e673b4e81fc97c4ec5addf94" name="libndr-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="1c8938b75df8318cb6079fb8085b991571f1fd3c2a7f2e493c8380017c2cd7f8" name="libndr-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d884d75e4599dc1dc2c8667086d7df22f53525290a9e6095b574cc4c01ce0c7f" name="libndr-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="19d8fd43ecd4c30464721a6de5e0e54ba982344d1e1a0d2890657a8d0a685bf5" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="68294ad4d1795003111a20cee4ecfe2c2aec082ef4ce10479e5a95d9b089cd85" name="libndr-krb5pac-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4ebe3bb8897e317e262af25957827e1920e6f56c209d8062aa26935e8c940ef4" name="libndr-krb5pac-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="161a90e19e2088c794056ff7ec7d61387d2aff4cd37d72ddd564ca8d2271e823" name="libndr-krb5pac-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0d5211097c9ff5c9060eddb2d36e00f0226f51b5679b692811b136eba1f375a1" name="libndr-krb5pac-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7cbaa4f73d05edbe068b883a50701721c4377e56c7024ccf97df18411a2a4fb6" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="293c7eb62f1ab117af5c15d2f81f7570b6bf29ccc9d2c08f1007a70ff9b8aec2" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="591c832678226cec17a023a1bbc6271abb8d20c248a4de8bfce6091e7f1d6811" name="libndr-krb5pac0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="70b181d3b68542313f6e9d7f2f294fc364f758b6c7df82f31f29c91d49e47745" name="libndr-krb5pac0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="bcbec6889e0b0593c23f60641fb7e444f72f8b782f75f53a4a751fbc1d1ab003" name="libndr-krb5pac0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="cbe8f71ea716a6f3696b1715e8d44d15515fbed093670c5005daafe6903c43cd" name="libndr-krb5pac0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="cc7f40acf11608f8143df7226c2f51b72bd3f47008040c2a5e38b394e492c155" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="835982cd277cdd81ab06c2106af732b1de26f0006241245663f2af180da05214" name="libndr-krb5pac0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="42c54cad4b8dc9d78aee89e79c6c5a168c8ca0831db366511b7b0f0f674f9403" name="libndr-nbt-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9afd926119295b06e86e5d9b03f799bb1a3062db85a607f40b41cb7e816e6409" name="libndr-nbt-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="95503d55dd6fd4c247cfbc0e61d7c16f0f61addd20326659a6db3c81b6bf125e" name="libndr-nbt-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f4f25c96236de1ac86ebb47d6004f856d0bc4c9e359485b733ae8ced1b230267" name="libndr-nbt-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9af86e35e886d26d18cd068663932aa2e61239869ffe7631d67231a75b830125" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="25da01ce9bf237e37e06be49e5714cdea96ab455d26ab029807fe8eab0b7ea80" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="71322ec27ef489afc410ae61930364591d6c3703ae11122ab73ba27158135b00" name="libndr-nbt0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c4f84dc2ec0ea734e0d97081027e4d2e3915c36b235771f127c9e46514cffae3" name="libndr-nbt0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7b082eeec761b858288625f4873c30ca15a2ae1e47c808f72446ccd3c013ed3c" name="libndr-nbt0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ef16fd1161d6ff1b7671af902212423e7a8dd28573c32abc56f181e0c9782002" name="libndr-nbt0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e111ab6c8ffd166c6db252d161ce2140be733bb78ad82a0b62d71864ed246502" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="aca42c506f3ea8755a629d8b08acfe8a71a335ea9dff58bb0896e926d9f22e75" name="libndr-nbt0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="932065764da6ac5f1de736deae420e840ca575800732217a899015a6556e87f4" name="libndr-standard-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8e636755366e952f68c62695a5c82f919230f36afd4aff2b38e6f30263488e93" name="libndr-standard-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4a27bedde48ff8d0d8a97148b414616639456a797f4e7b3d9c9d2b9dea910691" name="libndr-standard-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b42be27c75822d52c790bdc31405fa5ce159170899f39d25888e8d6af11b2327" name="libndr-standard-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="67ea38341e6a9d91dd043176291447c812b6af203b33795efd692c7fd2810f2e" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7363ec3204f1b8d7b01eba5f7d687988220fd812f45e28b4a05d6423c13dab67" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b05ff39ddc30f11aebbb4ecdf6213ad9ad970045417157750fe65cf1ec9f50d5" name="libndr-standard0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="773d27baee6c1516c022d594247549a1f3c34e4f24c5481e74b5a7e4a65da425" name="libndr-standard0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8db6d834895ad8e0da461f55e7bcc4e38046f9ae36792806969c3bee78162cec" name="libndr-standard0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6fd419a7f5dcef39b979263ab5960664a922813bf741bfe8c2b3919c2b03d3c8" name="libndr-standard0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e9da11b32c96284e452a56600947968ca385c3a189ccd744e946dfd309d37084" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="61704cc86288735c07bf6945affe66938153773d72866e2baa9af88730cf2e7f" name="libndr-standard0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d40f7e20fa29ee6c4bba84221b2779ce89fcf529ca80b3bf4a65e8e1999ed32e" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6c869390f05f8a93826c7d533ecb9bed3a32694010a2c0b040f90f0a8e81ce9c" name="libndr0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="cc413566175ffe5f89d3c1a77a5710c7df294da7743d18a40f08cff920eb0d0d" name="libndr0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9290b3b7adc52930de615bcc1ef735d5ce6cc721ce0ef3efd80fb28919d9b839" name="libndr0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d7209239b4825e8ac9135e883ce5ce732d8791a2b531ddd7920cf36f0060f3e4" name="libndr0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="acadce07ca11aeb240bf14f3fe8653088de519303465d0c35d7a7491b3b5987e" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="516422af0debce310bbedf1de93aca16091ca15414389d0ef4a4d3c714c3528c" name="libndr0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b30fd4f9bc68068da65b20eb6763a00c2e18a364d3c5f39bdfaa5373e0922f15" name="libnetapi-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="11aa343354ee84907870e2515f4547f8c1def95296bfeb32bf47ddd945e75709" name="libnetapi-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="5684c815f66e84d900d835382ddcd37a2824891e93189777462682ad743b37ed" name="libnetapi-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="244b29f4090c90512868d31340ff996fc5b6447beb97a779011d3c9d064fbe6c" name="libnetapi-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0a660b25061ee5b1295ef356a6a8c6980e25bc88e2cbc3bee1987e4116918459" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="72590ce20df71af75a796aa825267f600b764497ffef4eefbb25f510d1952368" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="11147b9ff9c1c4feca93b66e62195e3d24121f734e6db28b78cd51bd16b79351" name="libnetapi0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6c3981d3531c65e459cc0c10f29c6ff50f720e5cce166fd5ff2c7605cde09b3e" name="libnetapi0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fc3a25709ee249259648d26ff4936da2f4b8e6a68c420361026875659d5520d2" name="libnetapi0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="3cf666ec74928f9b0f7b1a8844a5bd9d3535ce118b1dde985ac6a65cfb1a4ee1" name="libnetapi0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="520f9c1b8f575db1864edb24809fb958a25c24990424850a904d72e619f0bff5" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="59594c0df96877636c6f71edfd031f39ff29ff2ae52573dacf3a4c35973ba2e6" name="libnetapi0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="71497dd08807246f0caceb74698250ea59a13dd6c4d676da252bb6211948c552" name="libnfsidmap-sss" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="3047fa37c3644b47c5bcc7a239b1a7389f97130a863092433a24fdeaa3243d7c" name="libnfsidmap-sss" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="a8fe8818b96bfae0008e8937643cd6a030873e400aa0183177a6c6b3ffb0f5c5" name="libnfsidmap-sss" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="fdf5358243ae3be00b7d4b9494913b74cbafe557a29e0f80ecface33c5d65069" name="libnfsidmap-sss" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="87fa531addbcbbd673bb9745360ada0308c2116ae2be9a744702ed8e30d59236" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="886d54a9f663920ae7f51e85474c5e8a3aac99e20511c0be2abbf74edeb3fe37" name="libns1604-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="439481ae61fe127eca65576e6161fbc5151023495561a161bd85db099d114aee" name="libns1604-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="c2d051d6d0804fd964ecf68b50b6ff875bdb450ec95a258e4f31665b61c5932a" name="libns1604-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0ef500836e4b556a9522c24a06164945c9bccd9209a6bc7f9b4b46bba2097c9f" name="libns1604-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="0340ba22561e0adb5a167899dfe6300fd84fed944a75b5da0c902c705955e0b7" name="libns1604" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3c257bae8b89c13d8a4fa79dd4f045d5eea26649ccd04926d7a30452c770c7fa" name="libns1604" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="e0835d2a4d524e96a748d45689d8ec5bfadfe73589d840eaad9bd58f91e736cf" name="libns1604" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6a6c71556cc3d5c3cd9fad64f441d8a77d17c4ade79114b9f670f010ffa009b8" name="libns1604" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="4702e7ad8143bb7611bef20af834c8ad332bab55a34a95cdd3a56666c2160d32" name="libns1604" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="854528aa239e995eb8bc6838794f4aeb36075c38ccf1fda17aaf064d2808f485" name="libns1604" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="d2e988f27618e043bde579e4ebcfa04e8d57e75432134646db0423eb59672e99" name="libns1604" arch="i586">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="bef92861d1c00a8fb7c9bd950ab125880d1089abb1de73e4dbb72938c3e9cd62" name="libns1604" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="238ab8fe3e4514458552f3fc3c16022620c961cd75696935f87bca75cc83da22" name="libns1604" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="b8d3f148ff8f8fc60ff48bd231c5f6d610b10b994b60e27aac6b18a611925168" name="libns1604" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2d73681615b4eaa0676ce0fabcec2c9d300e1b410aa7f14168a18fe90cf95e82" name="libns1604" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="9946ac44280df5b3dbaa3bc861b0942d833cdf27705428a6692c45708251c939" name="libns1604" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="080220206a918eadd41820e5b741cf501cf4cd5792dec81cad8755de89e5b433" name="libns1604" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4f2db141980e84fef3feae8af3faf8e3a8033c6fed3f9af53ccb9264b160c01c" name="libns1604" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="1f083172c6e786e9f8505aa20ee0f6afbc02b32389623173ce2e03c2faf0e702" name="libns1604" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="d5dd7d1571957a089a0d0aec679dcd57b959a6960c6bf224293add2169022d8f" name="libnss_slurm2" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72ea5f8306a4c4be0300f918f0e687b2435f4e0edc135d93fdb746d756fd86ff" name="libnss_slurm2" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1a000e127f66b6718eb247184b73990575aa154aee42e953967238ae6c0f21f8" name="libnss_slurm2" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f5daff080d5a16edf78c526d5aa836ee8512b762da8d4d6fac557f7f7825694f" name="libnss_slurm2" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6c770fe8ced1e9eb7a472e8a4413bbed60b02648acc2776f66fecc0e5159e0b4" name="libnss_slurm2_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e000ebc1701be74016902c47a6b447fd116ef4c4a95a8f877ba4b0a51c2d97fe" name="libnss_slurm2_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="422edfe9558f8a63dd4a1e33255e79f67ad006b3fbd0a670007c8abedcf5b464" name="libnss_slurm2_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="872e978b6c22bb815e0fc8f6c7e502b95bd60b0bfca22e0e00a029716b8358df" name="libnss_slurm2_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7eb66965f6e9dafc5ab096697063862bce0a296fc008b6bd003c54fd61ddd5be" name="libnss_slurm2_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="75219007e40c5ec02a7adbecded5b89cdc39dd5282fe12b2843d13454c4d533a" name="libnss_slurm2_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e228eabf533113faf4f2e7bfc4106b34bb63cf3f0c51a6484cd68555d3957025" name="libnss_slurm2_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0296e363f232fba4666ac8ce47c96e5fbaa8a75787d805e8eb7a80caa05fc231" name="libnss_slurm2_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cd509906ea65e584ae35d88af7c89485512f450cb4e8f352e0d65e2a09880939" name="libnss_slurm2_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="93771d0b66eee45ac62bd4af538ed6ba05af6e40e43f8afcdbdf74abd035920d" name="libnss_slurm2_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3403ad383d0d666ef5d5caad06b84511814f7857320cfe2125184df3ba02e3f1" name="libnss_slurm2_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="59d01d5379f73b9e33ef3df919beab71b899476603a0b5b25f7ab4be99ec2768" name="libnss_slurm2_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="9a16eae266881bc77436e1c74050b0daa3823bec9295942f5481a158f6df54af" name="libobjc4" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c7649e99edfd9c98eb05c3a8d23420e07439f965c96b4a28286ba85c248a3819" name="libobjc4" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f77a8ebb689987f2e21962eef4c43cbc13539413251bdfb7f2e0c9c0071bd92e" name="libobjc4" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a6e7cc3bc5e4886477a7f5206cfb6333f17cd0afa113d4f3f0fe1ae26be8466e" name="libobjc4" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c0f0ac7859604cb8dfdc00ebb7e1f2475b1fdfaaabed01ea73298696376bff25" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9936e931bdd5154b7d7c43ff8857624c0522ec07062ccaaec7e6624f8fac9991" name="libobjc4-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a3ead8209ef2413d8bbda3ff249b6b7e4fbf5b8c44650e7ff311c189d44e6230" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ce77c0105ca4f4c4e192775f3edecb52503451ee2d06069b3af6e5bc8d266119" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="0e8b9f54b91766308e9d975fe7164cbcf4f0e44188372c35f5cd75f9be0c8db0" name="libopenssl-1_1-devel" arch="i586">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="720cac69c6067991d366a24b2a2896dad9461d2cd54f6a9da920e1cf04a9b53e" name="libopenssl-1_1-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="662057d4761378771be0a29c72a0f20427bcea4fd75791f25c14e7433032f29f" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="914a279d666e8da7766eb6ba541557335af20026b901517c5c94a6424666942d" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="63d41c7c74b953df87feb1443fafe5120d551fb1f3211e52137a022e2f0b67ff" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="f14618e405bcadfc5a829666f054d06a529ee936d8d286a364cc27b2ff78a1a6" name="libopenssl-1_1-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="d5c553db61b6539c61877478d800bbec2f77d82d5b35c9aa0ff8440d1a426c67" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="824b68d964ef09c5f3c67bf76de50a46ce62a1c38d3c0c5964f9ed4620532f86" name="libopenssl1_1" arch="i586">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="0b713c407458ca25eb674b3c71a1fe22b3089f3d7578b01efd2584d08d525795" name="libopenssl1_1" arch="ppc64le">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="18ab73ce540a7e3ab15dacdf117f831376fe9762d052aef31a0cf9af085bea96" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="f3426ace2f5fbc712add7a62d47213864cc59b548fa44ebe4d20fba5b580a515" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="ab6788cc5511133c56c9d406accb6e8dbc19f92c8f54e4a19ee54cb11317223c" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="b86ef76d3b1e50cc2cafb96b2f3b42f8e7ac13c22dce1ebc90c778cbcff90c59" name="libopenssl1_1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="d553242ce3e600266eb61e11aecdfd009947cbf60c6d9efbfd4422cb40033afd" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="a8f782a6b3e4a00deddcab5208f1847c07374f4b4b0679a744d58734f06a2efe" name="libopenssl1_1-hmac" arch="i586">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="8a9081353bcfae8ee5f6c2340ff0de651d4c493a5ed7106049b7506531993f96" name="libopenssl1_1-hmac" arch="ppc64le">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="6447b52b8a192c1d44599648c6a9b2b10751702005082e515d1e8e5afbb32da7" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="0591b934c0f9afa2928709d2bcdd825b5c691e3581199a7d9f40483ae20bae25" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="83255bed50970bf882309f4b71a28e48934fb75a82f0427bca205759cffbb086" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="feb2b24fa5fd4d899cbdc1c3f27b4497e80bf79bbf8b1edb8111fb3d8a32f860" name="libopenssl1_1-hmac-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="4071a2e4aceccb48393887da51a763b395bd3555c256f293d3430c5e1e14ed2d" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="bab6d6731c8cf28eec8eda443ac2be55f192e21b77dc81497b571ecad9d1d01b" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="eb18d7afabf81357e85ce3f63b8972b0be9af25c81932df597b367866d76d1f6" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="5adb1ace5d49c60ae0785834899ffc533692f9da27bcca2543853ca0b4267fb0" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="fa7ae60f5e92e6c39f1f1b7e5d19486100fe0ff41d690eeacc455c293cedb801" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="9d967e3c14ac681e77781b600ce20f684dcec38888a52cba273a85846c700b5a" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="1c073a4afa552fee3c473e5ec7fec6f1a8be7ede5ba190f193bfa4a639f6735d" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="0df03953778c9d4e45d76353529da8566c2b01b0fb29980c8f7d9574a3ab78ea" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="1caac27f1bc4c66c013e375b591e1979cb240e4531db6ec348bd2fd452a6b8dc" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="84c2a13960c4bcf8078ab885c7243276a01961ab099d65a0b0cb4fc136602aec" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="655bd715a53e682382666700a54ecf4df610aae5bb68f9cd0275662532b5bf3f" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="be292195390b72bbac575d98ef0f7a1f0098b7f16d0e9b79b1a7a7f722920e8b" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="05f4ed98b3abfd1beedec735c2f7df0f258154b82f83f662bceb2485811f67c8" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="0e72c0e9f0421d460c785d32c0ef2516cfb38edb722dfc6f49066fa47cf2c3f3" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2706e7abd50c755ed9a4541e63e1f4954f98f17ff70e88ddffee324e387e2838" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="860f1237a37afee1947763d5c1a427e2bdf48290876bfa29a8398993d04e04d2" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="bddb5dbfe54f224618c618cf6760dd6b3fd050b6124fa20fe8a26ae24361edd0" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2ddd3841babb6acfdd2ed69d2d7214ee3b59d398c3bdc9502c49175a38555f16" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="82e0aeb846333306855d7037e12c7711f23f622703e9bd12504a4ef6a62ab909" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d51449fe53becd13359c64ca3ecbe209547cfc19686f253561bbcda4113fa188" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="a1a2d951b527e378dd4e96838d0daabad3d6164a613393b02ffe6c299e8237ea" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="7814e3d2ea03d4c0c3d9d39f3d6dc26acdfafba8484f9e1d928674921093417c" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="e121248d4b50204ce4d190ebf2f848411b0ab9af67262d3b5346fc649e465a98" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="8f3a6523642e64f5c366143bc8f24553447e047a23e92cef9e16f8dfc05bafe7" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="424465d507d001886757ff3c0bffedff0d578c126b832fef41f543dcc63715f6" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="f7ed9d378379ef58b527bb0627f300384d820ac7782a92fdc6ab4182758cc6ce" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="72c769c30a9d87d25c5bdf68fc6977f8a60dc4172b990b976cd2758e7a9d10aa" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2bc15d130ec588cbb2cb85bda15c10588bfac2371558067d85169b7215fd7b59" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b236cd4017862ad100df1b1ecaec98253eb98f92e7bf7a719568b7098ac5265e" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="8a7c8ae630e9cccb5e6f4f326094daf3664cda483d8127ed8785c70aba662f04" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="3bd9997caae4c7198044e423331b7aacd6b6deff1dcefe92f5a50bea9b506d65" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="80780dd4005d16d541fca4fb40fdcd2845620b1a2d11a45a7244b4bac5637bdd" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9ecde178983f1a1e6cadd6df2ca198057293f5f4f2c9afe9b923297b56b2c632" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="ed997a43aa06159e55ad0c386f471f0614deeff97bbc64c1c287672c0f207e8d" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="cff0aae6b8362c0d80dcb4061474b0351cf2dab77075b4c1fed6f525fe1e5485" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9f94c02c1f7f0af34c967395a41d7568c77b593f55ee5617f99ec6c983b16d9b" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="af3d18a15b6a466276c28b16724a9737c58da651f08663319ab2d75731c86913" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="ff713f7e48feda4201493269ada4a3aae505c56c379b1b19b8916435ca9529c3" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b93aa6c1e2af44e9881780d113cdd8de3e7be1af74fece14d2e2dfc08c90ae43" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2b91ad98979a85f4802603ee4d18a783664fe14ae76158f0668a547147294a0d" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="345d53eb3dc8f9d419e4d2bc1d3b0c700536b763ede4bfcee9fe1b28b0a7a6be" name="libpmi0" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fe04cf6f8ca30144a777b47c843f9b073a437229bb642ca8a76e61774914ce28" name="libpmi0" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="856b08b342a031da6d6864481a8db7ceb09b03b94b25f80d1dc8f420cca20795" name="libpmi0" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="13db2a981ca818d31a56c36b98c6a1365a1fcb0e0483f8caab00d8b993de0145" name="libpmi0" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2846b4a2e5a03c640ee06e038fd822c815a9bca6bc9de2e3497a624e985cd923" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b5de4accb2c2bde54fd073851504990bba913ff5af4cd072c0a553e7ea178aac" name="libpmi0" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="949bdf6093b4a3acc402380bbeea6faf8cdadc0a5b2fa24df231d1113b339601" name="libpmi0" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bf6f844ca21a531360e21e63035ceceec6e2ae3890d9e289d21bfc14e20af417" name="libpmi0" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dc06654a7d8dd55d106d57ae09db8555ce30136cefb0bc7181596d35fc6bca11" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5514e95e596b18e1a9aa90bc5a563642edbaab3108a8532d4b924a780a9eb6c6" name="libpmi0_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d386c467076edb3844f4fdf1a8b2859eeaaf8db8723eac1c6a84f4858ba9131" name="libpmi0_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0dbc88f9678a7af4a1e7322d153c2e29809444891d616f583b1297189f37f0d6" name="libpmi0_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e58dece78ea33db45793fbd0462cf3bb852be51dcc5f7e20d026b5e734a329bb" name="libpmi0_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6546e24046591df246d55d1eec96d83c7f2a3ed19a2dec65d3425df245f3240c" name="libpmi0_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0bd909abddf35c1425c656ce99d54b7811552304f559c7af839e14a76e218af5" name="libpmi0_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b251a2ca26711bd4baee0fd832dee46d3cde3c611928ed3dd058eb7735518d75" name="libpmi0_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="04167d6c49113f6a5791dc586fe927ea51c5bb1a901f3e98eb5b5e5ceda1c067" name="libpmi0_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="5c3b3562c9886e1ce683119b2a3256f25c7a25303593591f9d444fed082d183a" name="libpmi0_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="759fa16a7d921b466e10676fbb505a35c27ece9b9c2e88d5bf2c1f68a3bae103" name="libpmi0_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="85bf9e20ac3cec8ee9beab53d935e2fbee59b301a8961e5b9dcb81e0aa3498ec" name="libpmi0_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0a22025dbb9afdc5ff8312affaa07d6cee9b7805021abd3345421cdb5a44cce7" name="libpmi0_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="aefa077c4af33adccbca12990024a578426b118bc8380f8a37b60fd5b89d65d0" name="libpolkit0" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="967077173681ec3cba768c35b0d4ef9a8750b1fe0e93e0eaff19951e4017dfe1" name="libpolkit0" arch="i586">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="d79879d088cb830784d0b47cc448fd571d308cf8d6289a74ba3392fb11a336ae" name="libpolkit0" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="d9550057b27b9e7ecf3c531858e749985c7a152e7de0f4ef241589dbea2b0806" name="libpolkit0" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="38e785a8228dd000ef727c727a08e86b3e32c3705446e837348e07796f977852" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="0180cbab122e98cf9594580b6e57b5be064905f0c333b537ef6917c191813d07" name="libpolkit0-32bit" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="cdb8460986100014bcf9c0579aa6b6c20d2d1255bf21af2afafd6b55e120a2b0" name="libpolkit0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="20c07f65618f107e8be90780aeba5a71094b84e79a74c801d39d2dacd19c1f4e" name="libpq5" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="8f655de3b32a4b16a4d9e06f46c4e08e82262790b1a2d8249ed9a9eb9862be2a" name="libpq5" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="b17f061e4b081ba61163fcee3a9ce05dbcff015aff19a8cc8d4e1db5759255c4" name="libpq5" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="e5dbdce42f2ff5a0ce8689890ef9887a8a0a8894d0fe3c56a26e8ec07cc47097" name="libpq5" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="09ff8f81ef9756016d2270738405d8f9bc58f2aad5be01396dbe4b345340c0f1" name="libpq5" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="b06411500745bc6f68c7fb59453d954295bf3d13d525bf2bee7b50c03766b967" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6c595fcd1f7568e94adb2f611a6666d36a9279bac74e6f797b72a988eedfb2b2" name="libpq5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="32abdbda36646983639f26ee54ea898b6f90cbf367dfd0e4bed974c83c6fa5b9" name="libprocps7" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="a280e8c07077333b99e88e63fa3c816e43e9135cc4e98faa6871ef84a9fdaf5b" name="libprocps7" arch="i586">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="a132757cc2b4cb63f04cc296fa71f8178a0f4eaf652df7383edd9656a026b481" name="libprocps7" arch="ppc64le">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="eef1cc549c34b9a2d4dde5cadece2029f163c1c42c74e3c881472911495e8e74" name="libprocps7" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="fde818a78ed7e111051462ebc79425d454210fea236bcb5014d3f145ca4a68fa" name="libprocps7" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="57d661972d46e6df01a4484d5cbd8f33989cffba73e904ad5c76bf943a3a7f64" name="libproxy" arch="src">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="1e3a1613183becdcf911b2231f1207980206e9f8368228197cd034947798c177" name="libproxy-devel" arch="aarch64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="f15f10bc19b9320d112dd86a8a1706382048bef7a6ea38e701cb288c139fa139" name="libproxy-devel" arch="i586">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="5b596a14b44137b2b6e31821584e0e7142451365df66f0958a974b96081b06e7" name="libproxy-devel" arch="ppc64le">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="cf36816bb28453ceae3b36bbe6f68f181ae58ea397073db88b934a39b8ae525e" name="libproxy-devel" arch="s390x">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="b9d57033341e2537145d2337e36fcd0341a877fc45f091c5564ee4bbfc67235d" name="libproxy-devel" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="9b0cede3768d30d79dafd31ed4fa53417a542f6261271e81a12c623d04e91c5a" name="libproxy-plugins" arch="src">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="2e15d33d0a600f5c32f5ffc757d2116275da9186d701d71e800f224e2a493b47" name="libproxy-tools" arch="aarch64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="b0fc7197816e3bd89700ea675c0834617fed52e0a15c8c62f31c2e9c3bf589f5" name="libproxy-tools" arch="i586">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="01547b0ed6717070caaca7fc65e0b193a569f53222a8204f1ac8e7938e957ba2" name="libproxy-tools" arch="ppc64le">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="708758e2fd79a05e7a72975ade53c84d5f41750a5f7e4ac69f0fb2755ff4eef4" name="libproxy-tools" arch="s390x">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="13a02f69d8fcd24d069c0932be27ad78d9dfca84260073366909678cfe7b197f" name="libproxy-tools" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="342f872e58447df34db826324102c58ccebdf48080498649cf6cc8474a8824f6" name="libproxy1" arch="aarch64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="01e7a8e9e26f905bce483740ef0ff54681a613e87952a840d8a64184820bf1d3" name="libproxy1" arch="i586">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="3f23295af0b75b661e151eb2f02b4e11ab4934a4aecd4ca5d62c0b85d4b69ab5" name="libproxy1" arch="ppc64le">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="4ee451887c4ff37cabd7e5c5ce6c1a17d2599e6b351a40d337c35b25b131340d" name="libproxy1" arch="s390x">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="2567c7012a70ad901fb011a2e1cd8675e73042fbdb08437d39ebf86873ec3946" name="libproxy1" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="db00d18ee9d4b686065677854df180327f840d0c221f468d4d61185f9bad9ee2" name="libproxy1-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="acd05a1298840fbdbc3db3fb18b809dc392a46e72977675bcf247d6c7303b3ed" name="libproxy1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="4eae160d8c013b3c40083a7e2245b1a9fc3ea7504ff7858cf5a0049713db1c5e" name="libproxy1-config-gnome3" arch="aarch64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="3f1474873d5070c64ec14316517f41b5878da125a4689c15f6971119fb03891a" name="libproxy1-config-gnome3" arch="i586">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="570ed111e1e3721e086133365a411bd7ee2d6aa3cf730a206e773dfbd0c58753" name="libproxy1-config-gnome3" arch="ppc64le">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="3826fa48f04970c39483b6795b700c735c9157fa80789f1af08629eca43814bf" name="libproxy1-config-gnome3" arch="s390x">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="6cd422201ac1cc0b9697e1b454d3e64c3187c8debeae1165a7031a28719acf00" name="libproxy1-config-gnome3" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="13b5ffb9eaf38b3f20750e1a64bef0d97b404142f4fa6f990bfe613e59d0f1a3" name="libproxy1-config-gnome3-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="60c37a0b21d31d4b420c7dd4e754dbf8c923246492797c4d8a7b19380d2781ec" name="libproxy1-config-gnome3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="72b0012be6ad9cbb2ce01bac50e5f25c1b7c26b9ee6f56036ece5b3da6173d09" name="libproxy1-networkmanager" arch="aarch64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="8405febc69fcd73e49754488451b08836bf6dc69360780ae4bf88bb0bf4a96ec" name="libproxy1-networkmanager" arch="i586">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="43b377fe211d6a91137b52c54c0d3609b99a8db525806f1a4164bc01d5654d2f" name="libproxy1-networkmanager" arch="ppc64le">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="4fac15014b9009b646d45407cf800b3a1e3abe0dd1c8be38c18a48c63eb9f485" name="libproxy1-networkmanager" arch="s390x">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="fc85d2cedf3d82d14e3da630e4ea40bf1afdfcbde2aedd2ffb4c52bfb28b6bd1" name="libproxy1-networkmanager" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="33ea8b17c2a36da8449a7e1cb9e999d34c1fc2abf7804d565f14e1a1ba1d1eb1" name="libproxy1-networkmanager-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="87fa91799fde0b5af0233ae13ca65529494d2e409cf4a887dacada97ef378837" name="libproxy1-networkmanager-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="f3d007d3857fc68290303a977cd41e374f3c9e3e5c9b94dd2ea40fa24446e85f" name="libproxy1-pacrunner-webkit" arch="aarch64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="bd8ef3a2b98c1f8b2ad40f3b5e35148344192ef4356c56ca21d91d526d9c4b1f" name="libproxy1-pacrunner-webkit" arch="i586">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="27f38ea2b5866e1172f67ca6710b3302884f504294722b86f7beb0bd40546126" name="libproxy1-pacrunner-webkit" arch="ppc64le">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="aa99d997609a348e8f7a41d3811c358b3dbf4a52b688512c840fae74135be63c" name="libproxy1-pacrunner-webkit" arch="s390x">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="8e3a9d23cd5f88245c11e3cf1cd2c0b390e007bcbe4b1d7db59aebfad0b4f586" name="libproxy1-pacrunner-webkit" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="e840d0d583f818927e6a9e505f8a6a60759f6c1ece660d828f77d28addec9545" name="libproxy1-pacrunner-webkit-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="b72c9fbd264f20b9ca252fe7412f921e4b96c5f5a3e91771e814a2b164133c49" name="libproxy1-pacrunner-webkit-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="097585bf8cce8a5354812b8959d0407b46342b028e63d8f9d0e22b674e29b6a1" name="libpython2_7-1_0" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="c7fdfb999c866d6dbe0a5b24888630a0db502366ac0478b88a26d83b1eeb5f6d" name="libpython2_7-1_0" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="5cbd566de4c5c360aa0c291734908c4a63db06757a894c30fd1e8ef2b135f9cf" name="libpython2_7-1_0" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="c7c73796ae1c08c063746401279e23df57b3f6895a0e09d97fb68c4e9e560948" name="libpython2_7-1_0" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="52965ff45faa241108fc34d61f428b2798b1ab0a515a33e6de0724de9a504ef4" name="libpython2_7-1_0" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="915f674c2967845a2cb0e0477c1a22f2bd443ab95c972bf3eae9a2d8886601e4" name="libpython2_7-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="b457d81311295276be497e11ab9b49d387292564ebfef2dffdf0bb2f70435eae" name="libpython2_7-1_0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="95c5ddc991242eaed347a940231259134a81b00ffac1f866e9e28e1281bb0db5" name="libquadmath0" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="54df41c0d43fab7fd93052c3123cc9dbaac83757cbab7e276a06758c389f6fdf" name="libquadmath0" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f1dc8b06f6eb21d8da4d4d1369b5a2685763ea8d2a1b53acb5f3ee61806a75e9" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b056b8aff71f433418a96ee008c772192bedcdc3433e0a596576f99af155e82f" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1050b2221b26df94f9ba04cc413114b9d3d08791a0ef1c7773cd879cc061b5b6" name="libquorum5" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="a46623e2a2b5c3b5f63d200a662f86669a64bda27d18267cfb4975ea0a9c3fc3" name="libquorum5" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="59d10cff11721e54b41266813fcf49000fc4c719a3dd38dc81d0d4b48928853a" name="libquorum5" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="8d375a4947d8255144238675bb2e0c1242f7e4eda81c1963957a6e1854eb02b0" name="libquorum5" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="c341afc054a1065e8f2dfe5a3f66c2b671733a3176c1f7bdf7d8be770f542c18" name="libquorum5" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="49a8a9b864c5fb609430eb3d8824fd6b2e32a1e87a8172d934f4bb11277db1d6" name="libquorum5-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="b57d515aa8dd1cc87acbac3798f7d70edee33741665ba44fb46078096c8b47d8" name="libquorum5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="d59bb668205991aaf98459a8a574c2f75dbc877fd20b8133a80aa255865d525a" name="librados-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5f2c5efe09b9de29ef796be87d658482a12f24e7684dffc7ee26749325369b1f" name="librados-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b4ea8cdf29a4eb4f584ba8a023a0465448749d94df895010685db611cc34def8" name="librados-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8f42b393e4973961c227684f79ef2b9c4c652e38732c6ff3ddcc61eb52036b68" name="librados-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="867ac1384d0ddb8757b11bf91dda6e2f09f1913685d4a092791f2985081c939b" name="librados-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8d5fd44096c23b7354bf38a528ba67e46c8299e9f0ad9df368fd5d850a63ea75" name="librados-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ad4c235661d84f9b682cb2a2bb244c5e817c17509fa9db5c4d536eef5fe7cde" name="librados-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3cdf3b5e016edf103b75b32f3c6860948a548f1713e0319b82d542ef666047a1" name="librados-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="259f796323f84edbff951c90c872441ad2af9768318c232282d30c5d735e1669" name="librados2" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9310e41dcd539807358ed7fafe3c6415735f4432787079c63aeefdd21dba923e" name="librados2" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9d884d403cdedfcf88b6b3b6a242db39c320c8fac91d83d76f87784b737593e7" name="librados2" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="384269f9eeb26db3adaf4acefd9949957f579df565c1066364df1f1165581857" name="librados2" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="717a4942f70d0e6d4f03fed7318cb2f5be22b1fa5ce1b5dfd58ab0ee176f4944" name="librados2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="94a15c5a9ee6cb5624e2fc8a9c3862920a9fd3bec8c78ed216f9e8b367ebbf42" name="librados2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8b5280d92abf00063ade045d80e16ee1d22c80ae4966ae65db0d59c0d21b4022" name="librados2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="84e87a50bc00d7995a10ae1d8ecc8b885b1ae758b7a0fb5daf4845585d714029" name="librados2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="55d3807e43037dc19670a88fc39c0e5458f9e8c181c19fb26fc62c5bd5443197" name="libradospp-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bb487296054885687252bbb1d5b5a8b97cf652806a63fcfa62df9900437f97e5" name="libradospp-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4aa0df6083e5682f4458646b5cd6f2060e9f1c10b86ea1c55e0559f5ba74ef99" name="libradospp-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f5111ef946d11aff2dbb3b5c933a461f08d0c005b7947bb797d3e11bb9a074b6" name="libradospp-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2cfb0de3c9cae0737481c24f79b127ef7baf7dda0eb763868ad0f6932f1aa7ad" name="libradospp-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="01529a2c82b63b07421884c84a44f5f675b7a8d8ed1397baa64e77d0a25c5bab" name="libradospp-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dab3e3236e250390e0929bb3d129ddafa1d49688f5a80a434d18e50cba517cb4" name="libradospp-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cf2c3f41987b8c7407ea550a043ced8a805a7904e0a88b1f7ef419db72bcc2cd" name="libradospp-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="933ee611d25bd1d44e2bd9c76a24b99ce784902c74ff73d770bbf816b873bd0b" name="librbd-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="85ef970441f6662275e258343f34dabce69e81c1f24e5f74ab5b84219e7db4c2" name="librbd-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8c99ea8335387b545b906e9214ebc9dd2c10701106dce0777c96f3cc6d41b4fd" name="librbd-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="936e419067cff369b0e828827623ae5d25d9fd7af13e0b37c2d671bca5240962" name="librbd-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c0660071e54f507de4bd173890abd16a544502b5e8610f7bd9f4f65302fd70e2" name="librbd-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6bd846ea66c84bc624751f005792b5eeff4fb87b51c1caf5d4172ecd3ab9a7cd" name="librbd-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8d3b04095f29d61d1eda9b1ecaffdfd14e602609d9e0687f891fd36dd3accceb" name="librbd-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a8e4afbdc868904a0e9d6ca64a896d18979fd048275ebb4479f2380d133bfd50" name="librbd-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="128537f5509c9b2ad65291fbbf55f9b9634fe52f9c12e13556282b7ba434a292" name="librbd1" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b5d315965c79597e1d9a2d1ab8b13f4905431059f466ca12284a321e8b260d3d" name="librbd1" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4ab6d1f3c5ff11b89a434f585d2757cea22b6e5fd40ae6bce7d8b59eceb793aa" name="librbd1" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2146fbf00b0a5f9efb0ba76fa552a55b62b741e1c4c9f4477084ef6a71509688" name="librbd1" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fa1bdc495a1f63cdd8f1ce0ccde7635c0a22198471dc7d330852d1d0a1f59e94" name="librbd1" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="934645f78d38473520c889e9fc885e89cbcb132e326f3f10437fdd61a0ac4f0d" name="librbd1" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc61c7e643fb29d4abf1c4a6f643d4e007e28569ec44f98bbbfc7478f7c8c681" name="librbd1" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="67ecf3d0488d6f04f9bff76cfefc5e586bc182515e270cf29cc2308b862b7261" name="librbd1" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="77d40541a3f7f23b3da43eae188bf4b50b36c116c4fb2a9c8cc7b5264bc560b2" name="librgw-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="604881b5faa3692d50171a7da855b4cc650ee4a56a687bba7c00d2eed1a438f8" name="librgw-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4959dcd9fdc53824d25b065e64e934a220b9c654b4e1efb0e1bc579aeea5df0c" name="librgw-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="375e30c83371a5fc0de10d994abca03f9971ba660ecdecd557b22a3142cd8bd4" name="librgw-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="086b816921e9bf01f60127def8a5d55480fceda0eca7b47cee2a43f83902d328" name="librgw-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="025ba141a02d768ca313d86ebff4d14c78a46775db6cb409c50fda208201fa84" name="librgw-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0fa8be49fe048ca67429b0d597756ebcb266633baf883e363650bb60ccd00f78" name="librgw-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="491a1ddfb05909a8813d71d8b4552e4864aefa012702632be075af7c4d4e8a02" name="librgw-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9b94437f85c712b9ae7cb5ef1ccd8e11d60e03a560dde826afe37975c0b2d350" name="librgw2" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b512f9a583d772ab5e6ab8c98a29f4c2b6c9fcbb0d1147212c23c0c78f1802d6" name="librgw2" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="afb305a54ffa88cf9c0fb9ca72d5792f481d74bbb4687dac5ec84504ddf0a917" name="librgw2" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ef8a0574b2c7c8f58dda5fde8ccd1e380f7fdf3f58b62a369a1252aa585cb186" name="librgw2" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc985e2ea92a9a6f702aa3d55fcf12bac3d2d0d7c47305afbf3ed8f3b1719ead" name="librgw2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="eda4f82b081a4081be861cc7c61f4b2b6a4d3710112046933c0a89c5d14f2c9b" name="librgw2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d5670ae1d6c69c159db755c5e5101825a26fc80efb5a2e495425b71710121bfa" name="librgw2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ff0e4096cfa42c92b14e5fbf4b1a97f8d7dd49cb98d1b2d8a9db6bbdf772d223" name="librgw2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="818c7e87a7983211cc39ecc0b603b4df5e3e7d236a86604d9da1ead65fc3e5df" name="libsam4" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="fb4c23304f302d118e6e430bea4cbb975e94f7b6d78f903079e15a68d6f4634f" name="libsam4" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="2b05e48d6cabd4b3b31e12945148e0062768cd92325039117937331c31718005" name="libsam4" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="930a0b4ca21e65b954a20ed66b38754bff1f801e96fae5ef8e718854a25ed33e" name="libsam4" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="e25b5237bb19fe9141775899944c23da74c6a32cefa1f4cf8d5a134812feaf02" name="libsam4" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="6332f53311250d0eff1f8a621cdb9102a5b4a0946d906f33865015e0cb1a3500" name="libsam4-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f227c89769cee6bceb810c08a4de2839a21e81a66cd92580ebf5d70e39fe6e89" name="libsam4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="5dbde7dfab594064af9bfb8152f72c9b553edca161e306fd2625344dba4b867f" name="libsamba-credentials-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6e99c2c5d722f54b3e3a2e442aa3c7203b830bcc8848a06382fcd0589f1f5097" name="libsamba-credentials-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="18a8769bd905adacc813811ae5f9c3d74caf4d8b4d853c3a6ada11b5db6a12fb" name="libsamba-credentials-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fb83836a37947a375846b14cd6007171ad363df2617f3604669ddc5423fec20e" name="libsamba-credentials-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0f6cbf7f2ccf21c04fea2a3153166e52f6538fa6fad46ed5aeb7b2d099fde803" name="libsamba-credentials-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0c728c6cae86f669857c02f4fb27571e9bbfbaf1460a05d17a99335f3dd8a039" name="libsamba-credentials0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="34c750300f52269927037eee81ea3e438de9d604885bb52978db19c3c320dd9e" name="libsamba-credentials0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a115c6f62a4c59591904184027e074be009759b21f1bab488c83479a123d1967" name="libsamba-credentials0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d851f365d31e471304f7ec14974a775167ad7325ad48cc4146f9d31c992baf33" name="libsamba-credentials0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="167c4c36924d5580ec142f5ac21065943cbfd4ae8a9ae42be8a223ef79a90ea9" name="libsamba-credentials0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ffc090b134424be05f720c3a618d08177484469345fe84c75fe61be2b150285e" name="libsamba-credentials0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="cd39ba7ed30da6a6718abcdab75dfe432e309dafb6c275a2827eb48aebd92c1c" name="libsamba-credentials0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a781d3ffb6ae20cc984338e4fcd659dcdc0329375deb65f0a51b49288f3f0db2" name="libsamba-errors-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="84deca68808072b3372aa01016533d8bb0e2a000850c6a6158d22d618512c9da" name="libsamba-errors-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f65148feb09f67d2337acf2f94b0081ed1cc99c4bdbd7c7bf7822c1faec4d352" name="libsamba-errors-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ba358576deeecf3af15708bf23412f897c21d7e991e51883c694ceaa4e16436f" name="libsamba-errors-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d82b63c338d8d047ef49a11277bda2585f5942db0e9149f18763706797c2f9d9" name="libsamba-errors-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="cf98f0a685722c3abd3f053848c48b7451cd278b07c18e8e8cee3a5b93fa5999" name="libsamba-errors0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="451969fa73c2870e1fbcb8c4ee687cb1e63289983a90a50320d1193570ad58a6" name="libsamba-errors0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="78fac78ad434b7c056d6ad9b537f623d50996958b78004d74aed95682b995261" name="libsamba-errors0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="78a1f18bc46c7b2f6df5e8989b26e28a936a02240f957ade085e0d44b952e941" name="libsamba-errors0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="dc775f6b5dcffdd4e7c15e16d0bf960efdf442b4ec3016c40bd3ad8f5458df7b" name="libsamba-errors0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="835721d9b83dfb596fe6277a9fcfc9ff86ddef9678e2689788683cc5b51f6926" name="libsamba-errors0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fa5327689173d324a0563d15be870fd1f7ba81c776441a54d4328f6c866af9b8" name="libsamba-errors0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="107716a4db7ce68266643e1df6587de13e2b68feadc10ae75a23557dc03ad497" name="libsamba-hostconfig-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="70a326f4c0734af2bb4116bca3af6a16d8d520bc5fe370cda9f071250c7a9913" name="libsamba-hostconfig-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="57888530f2bbd409e1a373887d06f25ac6a98b0927f963d608c520fc60fca672" name="libsamba-hostconfig-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f4cd9d4d80650a66243236706c98de5f77120a5a2a3524d7310a760fc1f56919" name="libsamba-hostconfig-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0206b42930b41014b9f19b318e157ea1a44d26f8f5e25231abf6bb43c7fc7abd" name="libsamba-hostconfig-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="78018b9e1e08dcf44f2a7533a2f00f10872f2ee6e362220249b16fb8edce7bc0" name="libsamba-hostconfig0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4b1ddc8746f8beecf52dd37b30590c71debb115373bbdccd87fd1dff09531c47" name="libsamba-hostconfig0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b673d0a84f25701c70aa42cd34c2d9483018a211ee66350939c39dfa8e6897c5" name="libsamba-hostconfig0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8db8f41d91df08cc27ff41403769b406c588218b4cf365d8d42142756e9e6900" name="libsamba-hostconfig0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="86a04061f9274d64255a03bf8552303edebfb9e53dd6472438011d5482014e22" name="libsamba-hostconfig0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f05ce16befd2953dea9b832470f7e87fb6d16e13d2c94be43529015b248d6bf5" name="libsamba-hostconfig0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c0924626f8345b3b778a828d909f9387d9f1ac5ea06c38f0720837db1b1e947c" name="libsamba-hostconfig0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="63e0963198409e8d856dee21f220a441ccb8b30418e1265626dd41362b1ff078" name="libsamba-passdb-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f68f93960b3662ea15181fecb331b9e043a4b5fb441fe80807949d570c3164da" name="libsamba-passdb-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4e478ad87e9a34e97cb1c87be552712f885a9aa4316b629396f0e3acec01daf6" name="libsamba-passdb-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d11dba989b34df73c3419f62cb17770984eed3d34a72b0fd8d07eb6e82cea070" name="libsamba-passdb-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f17741a922a62dc9d2694a4808101e5255f012f171e56c5d87eb45332463a855" name="libsamba-passdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="5ce07035c5ff2c061e8357f02f7f954c9e3d9f46133c3c98634d27081b1b04a8" name="libsamba-passdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="55247d216923edef7ab35d0bfba7fb456912fe7e12d91624a3421417103e0483" name="libsamba-passdb0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a6235b6058057b893c07eed54094d2dd061cf530bea16bd02145d73f6c435616" name="libsamba-passdb0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="02ba44ad80477e9ce1cfb2ac16b06453f62ff25af93c7f9763ff204e53e31f9a" name="libsamba-passdb0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="81006f142f51793599c8081ecd608c0586145cc79d5f8448c3b89316ace338a0" name="libsamba-passdb0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="aabc91225b402aa151e694389fe742d25a0aa2635d625e3cc93f367a37f5372f" name="libsamba-passdb0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a88c5b3552e76782339f5af8d9242e247eba11fb0299ef29175078cf09cca62c" name="libsamba-passdb0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8c279ea90cf36cc3f86aec677ace1655b289d7518bd828ea49e44b001da441c5" name="libsamba-policy-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f6259ff3231f1cc58234cebd3066f8c5c7e21e3096d0398ddf538610f094a3fd" name="libsamba-policy-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="703751b6246fb25a9063b15014d4250331c6c723d2f129e00d70b552bbe19b93" name="libsamba-policy-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="649481a9e77a226ee6ffa575ec587651789a6e0fd2df2ec18b1f0d9dd2b82009" name="libsamba-policy-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ac29ec267152553ff1685d472223c9fa52df1d190a0c24c420e40b5fa9ad5591" name="libsamba-policy-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0694aeca307c8fe6ae729d68a174717374fc0a8f4612661d0b0e34b607756867" name="libsamba-policy0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7a6db61da1ed7f2191bc066d83d7cefe7c43c1c396c4e7fcac14fa0de5a4b91a" name="libsamba-policy0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="779426be06e8bd550e2ecff8302acdb2aeec3c0cc21433ff5035b437ced35bc7" name="libsamba-policy0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="621a0c2dd94df7f464b569ea5dff8392cb4291a3a716a07a45df9403c29021e2" name="libsamba-policy0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ac7d388e06a7448b5d568540a39dbad979340d34b0053b931c861adc44ff66fe" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="06dceb0c2ff50dc588f98829d0114cf8b093b410c7943c5c474eb8148554736e" name="libsamba-util-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="58a215687d240011838f2c3e23e0be82dec5d2285bb4fe33d965e4a5084b9513" name="libsamba-util-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="321f782ed8dd297f6d968151438e6347b1b1a8d9d9119a372091497e803fa280" name="libsamba-util-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="216ddfc834a1d4d51a519fde0bd45cdc125476a72a06759451a9d4874f59ecab" name="libsamba-util-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a52f95aac59c7c5b84c96e8a0457ee4d6b3e0d976aa375202df0192dfe7d943f" name="libsamba-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="428e02ecbc599d2f98e32f2def5f9178705178d5809024e043f2ee923d549ed3" name="libsamba-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="3863bc661be87ef991eb2925260a82e043c938559d84b15a641f42b8073ae04f" name="libsamba-util0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="373a0e595c5b6dfb152c91db9a62d509dc09abf236e894ebd8674dd66bfc7707" name="libsamba-util0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="62e5c6385423a6455cd51f10215d88c6fc4983394170d882f558ed720de254f3" name="libsamba-util0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d01895c85489d0099c459f02ed870342ea24a20a1dbb85c10733064dc55745d6" name="libsamba-util0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c1c9ea6d6a603af7b54636b052b5cad96cd57460681c16d584edf1757f53a95a" name="libsamba-util0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="dcb34efac18c70fb19dcb1316ea5e293aab57a2853a1e468736b328f627d8ff1" name="libsamba-util0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9aec2c340c3ab3c3608f0ed4d2b38f3a9fdb8ecc4ccfe7b6280aea507b4b0942" name="libsamdb-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="56e433a762044747ff2f3985e227a7244b68dc0b19141762b9ac2e35e970543a" name="libsamdb-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a77a4d4c95f21aca8c2881a3a7ad25e3629a6c3c0a8080c800686a193d529950" name="libsamdb-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9db4c1091d413ca070a31678369d194b58e8bd99cafbc784a468da30e8d99be0" name="libsamdb-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e5059459c4e0c82cc63bfd5167383264ee626d95ba0962ddfc2832672a6ab7f5" name="libsamdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c9f6dd9245a511fbe1b680af4bf6fff3a521da7d845b5153bcbcb2b9e1e7bf10" name="libsamdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9c3270bb82276d947574857e430edf54df42c8976c2fcafa8d79f29465e02d99" name="libsamdb0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="3d029683f93ec1726b24733ad6568486bd92393f09c1bf98395c439ac34ac656" name="libsamdb0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="eb5670d97468a162018f29b14b5a1779ef277e10823ec863013b55d4abe2d60e" name="libsamdb0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="157de84079daae659bcfe801b64b108ab86618ebe419eb4b4fed51f099fabee0" name="libsamdb0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a3775fc66d2160f885a373f23bdb20d51fea9ccb10e4cf96cf1993eeaf1822a6" name="libsamdb0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0128e806a24c1347349fbdbc9f537b806c0a43ed5ebe47dba6c3be4f556ec7cf" name="libsamdb0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0ee901970f138705077a7c021ba933d99689e78f059ad4601ece740d79864e0c" name="libslurm33" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9e846692f9bd6ce43e92bbea8dfb78c4be6806cd47fe649e2b904c90ef27750f" name="libslurm33" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c2581ed64d08b07306b89611823bef0e81aba97befdeaa821fd458f1d44a0487" name="libslurm33" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9355984e2baf9409a3ebe21629e0386a785d3590de9fba9776969e13e56d0403" name="libslurm33" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a1d85b9c2f15b83d1a93298748ee53201eeca3c027f328708b0e0c01c349408f" name="libslurm33" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0a0e25fff0a89f682e3b4dbfea0f0e4e15b45e8bc3971d2d1249aaab8ba8fce1" name="libslurm35" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="758d7d46a3d0f05010b8b693cb62e7a8cdcfe4eb44f9fa4148d99c022977e030" name="libslurm35" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fc3135d15571a3b5088af0112772ad4e9ee9c560de0eee325b05ae6655b3bb9d" name="libslurm35" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5bf26bc084a5922430bad75481965f9afb60d7cab8dc94b2bfa7b302694b5a43" name="libslurm35" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7126792cc4b50a69221d8275ae72da8867604b56c13df03ed3acf0b922b897bc" name="libslurm35" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5837beaa3618e7f5b8228867344dc8538ea89bdf68865fa60d96aece33a0b547" name="libslurm35" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="96fcfef1eadfffa749613125d1f9efec755a0458c8111ad9118297eb583d3ef5" name="libslurm35" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d2b468a454edda2be5d181df7c057072965fa80addb6db1c2dac197a6ce95e2e" name="libslurm35" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="65d38c9353184b2e9fb02872f4142c90fcfdd02f82b43cc91b30d8b66475bfc7" name="libslurm36" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="be58858de4385887e5bf35826c722e01e0e3694ad263501aa721d613de1b5b20" name="libslurm36" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="36e2f6d284b8261995cb7d9025324c67ca1c8725e642b0dcda8ae24cc2ddca8d" name="libslurm36" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e59a8b9c32b26265cfb5ed72e1548b3b20202f47be48293c7a94ff9696e09e69" name="libslurm36" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="1e450b3a1abd9eb1afe0321c9f08563343ae6b10bb7981577636b8ab46342db9" name="libslurm36" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c57786c90a276784818c161fc0354fd717db20868bde755fecd3010a3482f6b6" name="libslurm36" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="687030cccc5053b5a1b1e99ba478cf3c330888041291e73260aafe4bb91c5670" name="libslurm36" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="b39d84ad3f43b69f2002bcdb4861a8e852264668b765bc255d45bb0ff175159d" name="libslurm36" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="8a04b0192ccc788974ce8878ddc90bca00b7de086e8557c7f46e115b49d66fbb" name="libsmbclient-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8ca88fc9623d1a380b5f9799f95414fe8b0bc0e719fb274008e9d60e2c6a7216" name="libsmbclient-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="db72ab08bb65e1f90e30a11a92c3ac06f577c468ce48a5fd4644ec6e76fbf67b" name="libsmbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="79c6efc7a678ecdc58896be727c0596c47eabddb9b6ee137566efc3f97fd3ad3" name="libsmbclient-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="1d079e48365a31b2803072e2e2333da5f7096f9e010b5513cef88785f2c83cab" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="31f1d400ae49074c5a3965b35379b1e186395966acf2b6495ca338dbf41dc907" name="libsmbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c0c13b73d079f30412687806a89bbd1fe94e433c28c736896b4ddeacbee8233e" name="libsmbclient0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="821bb0e7a1c13c6e39fd91a7c3f2d5b2c2ca28d183fb5502e94a60d129d881a1" name="libsmbclient0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="eeb2e58930b9484c2f2213f1d8391e4c0e617ab294637e08762b5c4f35b7a3c6" name="libsmbclient0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="dc6f7d389389cfa5ee822ac575329bd2842a421ebe30854ba88362a87c22120e" name="libsmbclient0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f5802e29230fc936d4d22aba8318b46638c7c66ea5ffa432cc16ce5c778beb54" name="libsmbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0b523a2d23fef18c196c95d623a77ac6837ed1aa3a4e0d258dcc547ad630fa4f" name="libsmbclient0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="45ee591c9932762123cb267acd97363bd2c5cdd2dd6cd3d137673f44b0a4b9b7" name="libsmbconf-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6d55e53a589e668c64ce217f6752ac08fec68590888bd82f7d53086c23e0c2ab" name="libsmbconf-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e52544adb0463177d51582faed950d62ce9e0fb8a10ad54e7032dff49cf0c699" name="libsmbconf-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6d015c34ac6c471af1d2c0d0daaf4ec234868591053a4f99a3e4c88d82f3fdcf" name="libsmbconf-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="79b43eec7d0568b253fafc97ff041995fca99a2e8097bcfbcfe9c22b88a00d95" name="libsmbconf-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ef0e379047dfca13002603b4e385b2ea3258d401403e123b30dbc8491dc7be90" name="libsmbconf0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a6ee87159fbd25ac3997ced52f6969ad9c2a238ce505a18e043d718561f38552" name="libsmbconf0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2720789042555095734f0a6135b140ab829795ef5bf8aa08b9ea18dae0d8027b" name="libsmbconf0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="626ab2bd52d9a079675e5da26b667e7965301f50104f2feacd6f5a493f7b2159" name="libsmbconf0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="78d828139e3a277cf8908eeec976a87484eb21dacbb8ef203e523c4775ec8d00" name="libsmbconf0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4f50a5495a4dfd44806fd01b3547a1c1b9196de72c6797f3bc5bf5043ea123d2" name="libsmbconf0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="53d0256947c8970d7cd30a32f4c6df1f07b2106e9ecbbf5bbfc1686434c529d4" name="libsmbconf0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9004e188adbfe66658c05fcf1e00efd4e63fe70a3a9d16d1f2761c2a5557394e" name="libsmbldap-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f793d8be28308364d13a8d968e8ae449bbedfa0dcbfd09c115c41971c05a27f1" name="libsmbldap-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="53f25c505991a22bd8cadc40e784595338301038932d484b97f4f3b29f048ecf" name="libsmbldap-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2ef3208ded9a94f617eb49fa1c7d0f66245c048f960195ce09bd4bb5a1c0fbd1" name="libsmbldap-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d2162e62109d5af51eff5293733e21df34f0caab8038bdc8da070db0d6c6184f" name="libsmbldap-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a2aabf1ed58188a4eac2c35f82e92c1c2be25e853547811eab4d7044d638305e" name="libsmbldap2-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="aea21853d5fcb69a1359eb914042fb842c04ba8afbbb484bfd27f4e94ca343a0" name="libsmbldap2" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e5efc25f672f3b41a6b1fe3792e2b071c9e982747e720be2b2d686ece2ef830f" name="libsmbldap2" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="de4b444d2bee2ad986ba6638d745a66dbd3c57a215e18e8ee410f50e723ebb99" name="libsmbldap2" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="0fc1aab06aa65dd336af8b8f9762365c0102b8f920ea97049b1f135093b5c0c8" name="libsmbldap2" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="df6e8a34216399a11d45fcb6fc55c8e70b0f151b89f0329b6682b8b302ea298e" name="libsmbldap2" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f14bf4bfc5ec1e322fe4396b6761e0f7f0f998ce598e580f4ff87c52b0a9479a" name="libsmbldap2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="5b3e4d761aa32f01e02ad170198972d3aa50295681d99897473fea8eae05656b" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="c785a5183a6c87147328c08c4769595b2975e647584fd4ed41a7713c10e64c5c" name="libsoftokn3" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="fe265eaa92f7fbbaa84d500eadedf29ff864b728145c73bdfe671876fbf2a2f7" name="libsoftokn3" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="00e799476fb9a94fa78a20bce011027793550151c836be1446998632e9233dd4" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="483841abbeea7cefee21add62e67d44477032bfa9103c9c97af46a1cef8ad40b" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="7777de08ad1a2dad79d9e788aa7f6b0e1f1351ecea41c7fa53c22972d1203abb" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="8c909e528c5654df8a90b1969a6d3b83d47cffa5f7253db82a3c65fe373fb062" name="libsoftokn3" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="41caea44c5c812599578917a62b60522f3ab598991e0c63d2bd0669500e77954" name="libsoftokn3" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="13e862a3582b7213c9bbe74abcce58fc851b9f4103d106f1fae624911133496e" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f3e39abc237f525eee2cfc5fa30c70bcafe6ef837f9c09a59a1aed1e585e06b3" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="71bc706e1c2a5756f4431b8be74320cfd8d1a5c5565fb56ed6e38665bac8fac2" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="55bb5f3b5f99710e9affe387408c0258e0260cd1bce1fa515d99c627947c2c21" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f560f68c70dce7ce618d50f4163cc58179519fcfc90c199d0a34244df08d7ace" name="libsoftokn3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9af9718f97aecdef809ba3fa8d1562f506371e49e6cc0a83f79f21fd6c7eaeb4" name="libsoftokn3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="af4eabe4db1b8e43be2f27cde2105680737968a1c8fd16093785911d4e6d5fa5" name="libsoftokn3-hmac" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="a6683fa5be0ca549d62b94b684cc8665f89c33e6a77abbe7f4eba0b84d74f4df" name="libsoftokn3-hmac" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="43a8949872a949956762801b529818b58399f4ff8935f3253d7cded0244ef7a0" name="libsoftokn3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="41242cd82b4f051fa1c247257485e14d8fffdb12927bb9892fa25ab1f5e70c3a" name="libsoftokn3-hmac" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="7dba40b0d5a31fcfdd68e0c608db8ab3aea5f008f519959eaabeed83c365cffc" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="6fc98076500578ae93baec2baa0c3e2feea034ba199bc78d24437d06cf1f6bff" name="libsoftokn3-hmac" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="c6f9a943273166d77c72d6dc95fb476b4ae38d2caaeefb63891beb3e7352e6d4" name="libsoftokn3-hmac" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9051861ddaaa5a69524f9b16da5f8930a8529acab6db9a832f2e6c79e1b76e84" name="libsoftokn3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ab6ba8fb91cdb44d81a5c9650703b85cc5001d952a3cb34974f64285e9a1c53f" name="libsoftokn3-hmac" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9ffe9f019163623b44739a5752dd3e4c9c7e38c9f7996ff55f2565f4c3c19f03" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="fbcab985cc60ce6700460fe10d131249089bde90232e251886e4dd506f53d22a" name="libsoftokn3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f50e5c2d8aaf46d261284df626eb394320c868504fc5ce5db2c9d4915728cbd4" name="libsoftokn3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="66a92ba6c8654303f2c88133e09728f948b64d1efb2ecd18ef459fc4c15ceb9d" name="libsss_certmap-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="7da6a4c3858b79c53f02545e9b7e58ec347b9b36754ca83d92671b74fb4766fe" name="libsss_certmap-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="e3d73e56cbc095a1205f0d13a923fe3cc59c7c930db983f9d01720ba0edd6a3a" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="f4756fa028b8f8c9d7df1a76cf087f016aa64d4485ec07d6e0d1735f5d4fa7c4" name="libsss_certmap-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="843a5ab257efa8bce42e7dabf06b808093baa0a758236387b13eca95dc4b6365" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="2430a863f56d7e61abc97c4e9328231f96ff1c2866ba7103baadeea0abd643bd" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="bb5c1f3aba1599815f058dece0976f3667d2b352c811fbad40b041ee1ea50e3b" name="libsss_certmap0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="c68bc673487149a625dd13e3be5ac8f3d3e1fda27e0c791e623ff21e0276337f" name="libsss_certmap0" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="4a63996ad247e1304b5f91ec8560a8ab734d990bc9c4baf0f6eabc47bda9cfa8" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="9b576d2b0d6c5f1d2df3f3dd62019e408665bfe0ec3cb3e161d999196263539a" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d9491220d9255eabddf1671c6d635b9c10092225da5e3a02ce89f84f3cd39425" name="libsss_idmap-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="1c7c81097524b525e5f63388a1ccbe5588cbf2f6cb911e7f5f0b7792064c36a3" name="libsss_idmap-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="90b43f7fd191a0e25c226a0153d087f52ce82b935a0f512bdc822ba2b2ad7e46" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="3f083d81d03c15c3be2e0ef3c2003e24c078fc9bb5a712268d3de3e7c04084d4" name="libsss_idmap-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="4b35f3be7d3793a44ece675bb8a377ff1b2414d80eba3717922231373d58fc63" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="3173c9697141738eac47304a08d58fd4b6cf9bff665183b30e072903a1e458d8" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="548ef712de3b64920f6a7ecd6415ed593d2d7dc4d8c94343504f029f8e314002" name="libsss_idmap0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="6d48383e52016ff73f9dc27ee8f700a4be29142f6aaed5e288b8e96b232a4bbf" name="libsss_idmap0" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="3a3b4ba47782cd7a48d34f20615916a74f655ad72a9bf07c41652cbe1e85e555" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="df0831fdeef7e1456ec4e31c2e5325290daa0456fc9a05c9324fc2a110d52a4a" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="55bb18eaa3a2a8b0eb9a14062498986aa5202b1dd7c413a25759ae4521203200" name="libsss_nss_idmap-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="481e37bde5dcc46a276f667754ac46942d5265c52a3fc8d15d285775616703e0" name="libsss_nss_idmap-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="85ece4c5d8874f8dbcdd240468bb1ef47bd6f7cb5b9e7fd5dc565da2bcb54903" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="efba95149ca54e0645d530c278eb68807582e543e642d670e0992ab4bfd2df47" name="libsss_nss_idmap-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="466cd35f1737e234e01aa19975bb73fbe62045d2892df3a2a29ac40e25ce8ed0" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="ccbe9f2fb055dacf5400be7938b64633c40c4fe56e25a95eb4c45ea20a855469" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d783f9a53b8ac648ff7aa2cae51b26bc5664b035bda76da46b245669e414b7eb" name="libsss_nss_idmap0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d140d9cdd7f48032bc704db4d02a19e3f8965a992dc7a9b90f48d7f142f0bff4" name="libsss_nss_idmap0" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="dac9fe0023e36bb43a18ef44b954c36cef19442c4c85e231391506885e1a1d68" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="def4562a3d55af3a5fdb2c23cc391b077cd559aaace1b49fb208ac150a1c929d" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="5afe605b7aa434b9d3eee4c3a2a758aaf9b7b5e6830c27d57b42849d37535e02" name="libsss_simpleifp-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="dee816eb6f07b484f4089727824fdc77a238e20f2e7e7c95f3d68ed9e10f7b70" name="libsss_simpleifp-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="e1e882e9fc9c5f652091aa1ef7cc49fd0c838433527224c43ec12c9908090b76" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="4ee49662acad0d38dda6f032a3882eaf9a7467786ea56788d82d7696ed7399d6" name="libsss_simpleifp-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="10fb33abf4af446bab73ec98689af6a9775914334ad36490a817cfcfd5ebad15" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="7eaf85d076382514d761e41208f0899b255b9f36a9564a7fa8f0a8c11fcc33fa" name="libsss_simpleifp0" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="36924ce3f05c034ee0bd61c42ff5ce12a75dd04f90f3b697013ceeb1b6b3a0f8" name="libsss_simpleifp0" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="fc7889961cfcf43abb188d0ec24fe3dd36cb63a858d5a4b8dd10b2e80ae778ab" name="libsss_simpleifp0" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="aff68d2a7321b522fcc732dd7282c667b5271fd28b6aa2b16519f3f0f269ad79" name="libsss_simpleifp0" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d5baba9f09f59405edbe98f45fbcc1bb8fe27fffdddfaf2885993c368fcf56f3" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="72dc29f19ca0333daf74a66515f06af38ba0d696e7a9e3a7f09719c8c1f6c582" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="0f9780b0ea3dcd669bef9fd2f9040cf811e5e006002c4b35429895dfb9f41527" name="libstdc++6" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a436c6243ac5dc33ee5db1d6237a4952c50473c268a472bfc6e97fd068d16eb5" name="libstdc++6" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="129744d2ec1f4c6f6a3ffd50d380f2ab5710cc251f7a4c2e30d85283155bfda0" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="41be0ccf9abb7d184bcf288a9246e5a5525465edd03944081b8e5b8d688e763f" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c5ffaa2a94240c5497b58f0d3507df886bf9b68245c20cb8546a671b26c60d9f" name="libstdc++6-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="92d57810f43a774e8c49bcdef3d3b346686b3bf3b2d642c1ced6c139937449f0" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6b32708d694c6794763b1ff3674c581342b370f7162d29736984e7caf084c7cb" name="libstdc++6-devel-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="69b830e6b190471912f78adaae3e010663a0d19a73d34cc3d5974e4599d94da9" name="libstdc++6-devel-gcc10" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ab0dcb5e951e14f3dcb26d662319f39eb7b897bb2bf6ca502bb2a938b950dfc7" name="libstdc++6-devel-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="5fd3870079cf92caf524509a98c54a4cdae272ac6c69efdc5be8fd1ff13eafcb" name="libstdc++6-devel-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="58723e5aad014dd73b93e027c5af834479b7c153f33c933673b7673f6273a71f" name="libstdc++6-devel-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ca91c60a3af36b2a9d5badde2820bd7ec387f97750ba7d2aa8b2ca29586f693b" name="libstdc++6-devel-gcc10-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="789f8d27566c5b06e3068f926507ef48dc63b3dda3bbaae9523d71c6e3a296f0" name="libstdc++6-devel-gcc10-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="efdb999609318d8f0d0e1efc512f99930f39b4929766cdcfc98b167de2e37c59" name="libstdc++6-locale" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="06381b846fafab8cfe491666ae9540d6c8c4cd3f677114edec4a89f83ec6772c" name="libstdc++6-locale" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ef53b8ee2554effdb8186b728e2b50ba9c51f6c241afb7d7b85a1f7fc12de910" name="libstdc++6-locale" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2cb50b7e27e974ea9d178865e03d8cc6adbe2f54fbaeda11e764731dd4071a6d" name="libstdc++6-locale" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="655c6f74e29db73ecbd0a3619e18ef32d415a4e8c6950a726aafc665ad076d29" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="e32e41e5f0555e65bbebf53fd03fc8ec992d93f5eab57bf492d80867a5870c80" name="libstdc++6-pp-gcc10" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="a1ad729ae705be93055e742a4a9fd3df7c5f9b9dc9c80a48013228894d1ce618" name="libstdc++6-pp-gcc10" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="daac991263d689d3a8c2a6061ed900f3d29dc8fffa0094bcba3eb45fceb342e9" name="libstdc++6-pp-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2e05b48e743224ac5a85392dc008ba94c00fb26f8e3f7556cf1ab4e89d6bfd90" name="libstdc++6-pp-gcc10" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1f3509699abf487a78b043268ac88b8e89bc30a1599a8fa542db7aa2eb67b554" name="libstdc++6-pp-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="219ba8029c244efe9cbac6822d93671e979f59f0d85634369058e891cbc8e9e1" name="libstdc++6-pp-gcc10-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="76d6c058f5c14221fab7b456a7d8fdfdd7ec05def6301b76ab1794c2f1b0aca9" name="libstdc++6-pp-gcc10-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="c4adabae2384a6f4703da5bc51c982f56da447256107285d23e522795ad31d20" name="libstoragemgmt" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5ca8839292f24ad9d7e2371f9687f58183a8ac6ca1f976e52d42895376f6b043" name="libstoragemgmt" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="55c3e46ed7ba08869d0fb2ce87e1776c34dc86b8fe0adea7c973c7dc98c7797e" name="libstoragemgmt" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="40e43bd38754bd122ff8c6c57fc8f9487749cd7b2a44baf6aa2d0f020198056d" name="libstoragemgmt" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="50bb4519a429f2bac96b5f2ecb64d7ecc0ffbf76b643017ce80181e78aaa07f7" name="libstoragemgmt" arch="src">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="55f54d41861a7e6f0e32e12cd8379b66c6c2307760414077011444ec1dd492c9" name="libstoragemgmt" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="ae8b413a3fc11c8fe5eff36c4c345e1283f55102bcd80b41da3d9a0f363afabe" name="libstoragemgmt-arcconf-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="7c952703cbdc84e155583758b57fb272a0f91fca8c4ba57dd221cb4226f579a4" name="libstoragemgmt-devel" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="df60abe71084c8eeaa63cc1804265e2273b39f62bda1d7990f95b72a8ed9513d" name="libstoragemgmt-devel" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="acb833533bd73ac8f9e93081148c74f8a9c9bf401e37fa2b4b52d13fd8d88962" name="libstoragemgmt-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="e5ceb0bbac3aea0c3fc936916d4c4ca76f0f4bdfa54a32992e616bfc39539bbe" name="libstoragemgmt-devel" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="9db3067af093c0dc2e60711a0d51b92d5c4dcd2a5cd76180f9f940d545af4637" name="libstoragemgmt-devel" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="18cd4205d3bf223ce5018dbe61db823ed8fe7ad002d8f9603f76c7f554f79ca0" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="214258ee42ab93cab3aa4b1c2b0798c247d714e8e9d403f7d28234495f5e4bb5" name="libstoragemgmt-local-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="4cab331de96dffa494d86b300676c2db18399d461bbca7dfe285f98efb201424" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="1763df7e7bf3becbbe7af4a9241b30dd31e22c8ade3e601eda2e0c21b33fe75b" name="libstoragemgmt-netapp-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5284c59dbce580f08a6cb4fb8ba6706c2857601b9756bf03de66ce926e7a8c43" name="libstoragemgmt-nfs-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="47cf3e32811d89c09fe21139008bc279536a74a5087383d0b45b08e8b3368d33" name="libstoragemgmt-nfs-plugin-clibs" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="400187a6e12fe0ff7655fd371065952072ff4ed6c199f9d34a78c45016d88bac" name="libstoragemgmt-nfs-plugin-clibs" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="f6c73ec1b0125b21340bc209e34501971dc0d67b28ef6e420c31871fdd0f434e" name="libstoragemgmt-nfs-plugin-clibs" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="f47ad3618e25e784e5c4a205583bc83996438d365a33bd2bc942a2f335d30bab" name="libstoragemgmt-nfs-plugin-clibs" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="39649e0390fa65fd098e43fb9e1ae29060a95fa8cf4d790d021aee7adcb6cc58" name="libstoragemgmt-nfs-plugin-clibs" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5ac0902dfb1a6fcc04184d27516fb360fdfdf68324d4e3065b5387e16974caf4" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="78e0756d94a1b3309fc2677618cb33f2df5125fb7d34be4f404c74b69fd771e4" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="4884605b9705aedc48f55b50564d7f7866e504e791f424e1cf73864522105a27" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="2181f15866af08e99f415149027086c4b5ec592d54a4936d0ccbc3979ecb15c7" name="libstoragemgmt-udev" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="19fff444cce7704e88d4a564af944afd5f0bcee803b22ffc3404595872e755b7" name="libstoragemgmt-udev" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="0f573e068b6a72d831a22b14b7441858df1610cfa652f84b81c96a35dcea357a" name="libstoragemgmt-udev" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="c44965331d0ef8abc0cb907c83d3ce25d8af80dab1747bfcffa3f4cd4268b389" name="libstoragemgmt-udev" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="4edd5324701b52ff6a23bc3b0f4abe0b04372284827546f860284f35f0a6964b" name="libstoragemgmt-udev" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="ecc22c73548f3ec309902e418d1ea8edc7247421019b65b156f35e38225f4229" name="libstoragemgmt1" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="b0d81935e1623c348fcb73307439b0d2d51a4c6b20f76fb07c7d420aa5317993" name="libstoragemgmt1" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="7b3b8aa78cf15d8e441f5d6dbe712460a06cf1d74710fbe3974b8350892e1f09" name="libstoragemgmt1" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="35fbb9db91beb16fffe99a0b7af26258bf868ffca9a2b0f42973f90990f7d75a" name="libstoragemgmt1" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="ba9f1b905034b176aa821ee291a9be35fb186f7134cf49803a25ffb68bba43d8" name="libstoragemgmt1" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5bf994b6acdeca9ea4e91b257d69b46e27f7065748ffe5220494d4d9ef0f77b0" name="libsvn_auth_gnome_keyring-1-0" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="cfe7338032c7d51ecaaa01d15348511809437aa78a3178e6726d79ef1ac4b6a9" name="libsvn_auth_gnome_keyring-1-0" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="d671d6b02cc31300d01929f403df78e3c07eed00a2d330143de338b580ef8d21" name="libsvn_auth_gnome_keyring-1-0" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="a5ec16897248bf4859c95eb10623dcd34a9e92a27deb1190c47d9e538d3b351c" name="libsvn_auth_gnome_keyring-1-0" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="fdba9e245b46c5873021d102a8411247f60fb89f574d4148184da1af87d09df9" name="libsvn_auth_gnome_keyring-1-0" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="903c65cd9f9b0ab8531f9da4f21efe8955d5ea32a3173af2c102b6424ff48662" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5ce73370c8dcc24807736ef5eb9a2a70fae65082cab4aa2d740884a5f12fb6a2" name="libsystemd0" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="7743fdd999cc0cd75a25558e958617c17477e406330e0def730364bdddc6bbcc" name="libsystemd0" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ee31dffc3ef04d0df86f458b54fd5b840cd5133def7c7958f8fc1462574d4e60" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="565ba3922eaac24fbc8c58a470911fc93b0fecad07f0b758545cbd4e0a9395db" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="3c5f84a26c50b71d4f6f6b20a4e1d4c0b28ea502184681488a501501be62c711" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="d812e22f396670f4d6b7750f856923a9d485705676cbcc425b962abdb929e763" name="libsystemd0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="cc2f7389fac6742fca454c374275be570e22dd8cfb7d37fd0c107d159ab39360" name="libsystemd0-mini" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="b46c893fee1efb1809d92b71f46851f0e9537f2d4f2e5daaf07a07e6c9a79f95" name="libsystemd0-mini" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="feb61e21c976bb7c4360b1de169c6ae56bb9fe523e5a86566a487f43b030513f" name="libsystemd0-mini" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="bdfe60ea3e75e0880bbff98f6a263aa70613385fe1d5fcd0643efbfca78f0b34" name="libsystemd0-mini" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="c5f4bee9ef7d1883599897dc029eb7c15aa11d7cd9caa487608335c1fc98771e" name="libsystemd0-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="a6ac4cbb4dcc493c9a49553d81ea7bfda4020e679661c4e40ab2f1a47836f014" name="libtevent-util-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="6db15ce81d907b868cf6195c15f09bac0d3e13b532bacf771a877e469df80640" name="libtevent-util-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b909b18c2a0aa2ae2683d55e8f0169e861a37aad0c018f86b9f5cc7093fb1353" name="libtevent-util-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2c917fce7497dc2de83de1460cced2694616ffdf4f17638f166c525dba3b9302" name="libtevent-util-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="31f7167d3d8877eec881cd8f509a93c426a6313627e5e21bd5665354e722d482" name="libtevent-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b68f66f2cb4a9a022339320bd36c940e6dc1a6863e1b7d3bba3fde7ebec4bd92" name="libtevent-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e5975cdc11df3269906ecdedabbc6817b30ce4c26cb6aaf740402e042b0629d1" name="libtevent-util0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fe6449ab4ec748618da1b523c392eeda0ecb99017a204d1a91f60895c3ca05d1" name="libtevent-util0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d7f539268879c6a2db864906f5f8cda9789847ee33094426122ab0c9d512bb41" name="libtevent-util0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c04f783ae33e5db7c23a903fde91527caeaf108b6e8ff64c07f9425d4ee61049" name="libtevent-util0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d14c7db2b2d284a835dcc11178f006b955a32432933f757973c570f8f4c460bd" name="libtevent-util0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fd8bb664b8f998bce18589586a1e50a377a7caab4e0296092bfdea8a72bddd94" name="libtevent-util0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b5c51fcc6b347b7872005d5f06f4a9616e0388e787e7c52f86f4266ca6ade1d7" name="libtotem_pg5" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f65e9ff600b5ead31bd7118ccb9af28f91c5d1812e540f41eaab79ac835e2486" name="libtotem_pg5" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="65c3eda50701d5cc70420b28c7443ff1ae5ef52a5b7c8634175b5f5db35974aa" name="libtotem_pg5" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="7182986530d71d6cc28849295198184baf50db241ff57b7317f0ed3a10309bbc" name="libtotem_pg5" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="ec62c2c379c4a38eedcfe32b463d2e84e9bbd1c9db5077d555c199a036280b67" name="libtotem_pg5" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="154b6df024ea03bb14481210194360689deacf7cc12adb7183c83d28b6ed1daf" name="libtotem_pg5-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="af3e5c4e85219eefadbbad440f83775aef307dd3d05f12f7e201da0fd0b94f46" name="libtotem_pg5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="8b451fcedd113c19cdf282ab59f1c43e4c46ea5418b982fab0136bd26dc685a1" name="libtsan0" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="924d2e535703a0f9efae9725d2917d9bf3099b68dee9380a642b0cdcc26f67d4" name="libtsan0" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9f7321523c99fb585856aff08f1fe53fcc5b3802daa484c21c0d879a549ab8f3" name="libtsan0" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="bc165451fffe6c2538aeca73d6e91c7576e9d5cce0090a5e81e2c791d39c625d" name="libubsan1" arch="aarch64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="29f1d0633a1448f6df9af62fa4506b7d2f955ec4e567d8f28b748464068d3e41" name="libubsan1" arch="i586">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fff3c3b6874bd0e47555bc41c95f9c7279d2d72ee64c9abbbbc4b66e23e0d5ec" name="libubsan1" arch="ppc64le">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="4e03aca4af787576a9d51513dd654880953396fbda1b5d7b183da842fe651f20" name="libubsan1" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="db01f95b4270bfe80c4d9a3269e43cd64bafd363709c259bb4d1c2c6148d552c" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="fda3622be89fd6243721e995b614219c6f46dc5bfedb0f601899868d35fb3a6a" name="libubsan1-32bit" arch="s390x">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ba705650424ed5a0188dbe1e124615c9a111c09fb2024198e96c96c14cf1847a" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="1.3.4"/>
  <changelog author="rguenther@suse.com" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="rguenther@suse.com" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="rguenther@suse.com" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2e24dc148e297ab1fa1d4eafb08a2929bdd0f5104e4f8b3569f29d0e24c3c1a7" name="libudev-devel" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="77f376835e0f494d97474f2fe7b1fb772e0c2d609f169cf09b2945932d77fab9" name="libudev-devel" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="2e096c9a99c92773585d248fb3b6bfa1286da42aa4ed77d766575380799de20b" name="libudev-devel" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="169b148170a17722222fbbf36f436e6fe09ac6daef919637c1ff025b3bfe2199" name="libudev-devel" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="fa2262b6c27c7c766e519a4834bcfa9d0bb29a2849f24a95a62cf8c53a91df17" name="libudev-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f613db7fb9014d6b5c794ffb67f5fb6a653b1ade20541fbd4380317296df977d" name="libudev-devel-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="9c31f82e4819f0badbf0fb3ec95a52e5dd4137703a468e625eb6d1281550bc71" name="libudev-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="bf4a5e68f7c3a0bfa210665a97bdc991b58ae56481f2c686a140dff14c4318b2" name="libudev-mini-devel" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="eb88ec2cfb510f56fed9fb160bc38f1bca2ab387225525bf24fd248bf3a374bc" name="libudev-mini-devel" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="1f8b8f69048962b29532b19f67f54604d5e58eae6502bb1678b95c3fa82e0550" name="libudev-mini-devel" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="372aa269657902e08b0fe91f134ed30cf4de24dba325c6b3420933821fdead96" name="libudev-mini-devel" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="612645af5b4cb7ff655c15ce70e3ed0ddc74dd765cc295b6dd76af826a7fd159" name="libudev-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="c1c017cdab400734241bdc6ecf7b81ef75c1b9b77d6c3f57ff1ae4b89087f2f6" name="libudev-mini1" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5a8dc139fe9b946cda6afadb746d994b3df217fb30298084da1e15231bf7aaf1" name="libudev-mini1" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="470dcae9509b8764bb05f4a5ccafa347102820d65e73d63f952795c5d29680ee" name="libudev-mini1" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="e064185939b215f3f5c63c8f204c9f3238ab193733bfd808f12e06ddfd47a554" name="libudev-mini1" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="a36140f313ad66ee88509d797ca80078daa12e5b25e899f44f61cf548354599b" name="libudev-mini1" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="83dc2af06d28979eff52777331822711b23ea2418ef6f5a3c2dfbfee3d6e6381" name="libudev1" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="2a5ccb8cc1f399f4de4f3fa88589dbdcedb088b26df918c80cabc797df3784ee" name="libudev1" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="2931de5a1322436448e094c9cd8f7fb4e078f0e69bfb18ac3f66bcce32750793" name="libudev1" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5394daaee31f1cd3fed5615496749930ad9534e8aeed2e2b783741a724b455bf" name="libudev1" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="4a1f70dcaa6dcc58aacb99105b13fd6547e991bc7599f44762d533adf6b2ff8d" name="libudev1" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="0ed652d9212a886dd5e05ae09da58993b0eca2c9b7fa53323328877e9b773a26" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="dcb02e146d750f169a4db805383b1b1cb182601b0b04838ffb5da4409e2596c5" name="libudev1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5a4ae938a196f83276d1f9b16824c99e3e5c56de7bc4802750b5d25ec561470a" name="libunwind" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="17a52912a64e67c0fbece880aade95a3f813d8b3f52725ee318ce6b513114a65" name="libunwind" arch="i586">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="dd61e06e2064ee58b25d821bf6ea26b0ea919d9c7c809ab02633e8aa957b53bc" name="libunwind" arch="ppc64le">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="be21a1621a6776ab31480f8919faa9dc21907ee89883db5a486de0db581c600a" name="libunwind" arch="src">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="135ae4d016f42146bbaa4f9956c0ceb4ab59663d3e95f4db79d4c3698c5e2369" name="libunwind" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="7d382eb79d1010f49b98e3a311cd65912817d4303ade0f14fccb912bab097da4" name="libunwind-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="9a0a876d9b1da859ab7064c2b2bdff8e07c3107b795a1c4366bd09b6aff74d1d" name="libunwind-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="cb5e2cb16405de3c8b7e617a00b541a92a67239787809abd3889d5e84355cfbf" name="libunwind-devel" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="b77f51d18c18ad010c52fe1e9c0e39070cf7fb9220351d6e179536c40ff1cd9c" name="libunwind-devel" arch="i586">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="aedb89f1912f42775c9950badeca5ff3b85ea10cb4a412f5dee098b97ae0894c" name="libunwind-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="2e6efd2f0df5c09f1432089170ed431a99f50e710817edfad2e913e142b2ed65" name="libunwind-devel" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="4.2.3"/>
  <changelog author="tchvatal@suse.com" date="1400500800">- Clean up with spec-cleaner
- Add dependency over libatomic_opts that was missing
- Do not disable fortify-sources as it seems to work with it anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1425470400">- Use url for source
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1427630400">- added baselibs.conf for -xxbit packages</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- Add patch for bnc#936786 CVE-2015-3239, off by one:
  * libunwind-CVE-2015-3239.patch</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1461499200">- Add patches for boo#976955:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1463486400">- Version update to 1.2-rc1, should include all our patches:
  * 0001-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * 0002-Mark-run-ptrace-mapper-and-run-ptrace-misc-as-XFAIL-.patch
  * libunwind-1.1-expected-fails.patch
  * libunwind-CVE-2015-3239.patch
  * libunwind-aarch64.patch
  * libunwind-ppc64le.patch
  * libunwind-1.1-tests.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1466424000">- Enable minidebugs parsing with lzma</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
</package>
<package pkgid="3bc5323e87e591117d5f4fec9dd57e8a13c74fc494357bbfc8504cf9e9305723" name="libvirt" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="6e95967e038cdd2da72a0a27bd89832080cbe8bb53b2a24aa721223123dddb0b" name="libvirt" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7ae89c0e7f99e9fab345d2d4cbfea5e3531aaa0ff8e2e1fac3dbc22d00d1a6da" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="59ca41bb300a6bfaa85eb3e1f96a4f027e5493781ff96ce03972baf6bcdd0190" name="libvirt" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="c1f219f50346ec6fb1cd54f8e39d0241ccf83173050985cf45668158fa47d5b7" name="libvirt" arch="src">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="24d061ec09dc6d40608cd6a64908e972c995d1dd07c846775caab0d19330eb4b" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a382fb70b5c5d90fd41308195af685fbf09f604336959396b24c2602686ba711" name="libvirt" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9b8622c6be15e8f3755a7dafb6a84274e4baf0f8c5457f9a0192bf667d6576ef" name="libvirt" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0af1ebfac3acb016bf4ce359f4927be3934f2be9d7fee91257471970c0cbd729" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1aef3c160d788dd9766eee5f463b2ef1a0556ee06e50a87844a4fc3f76fd95bd" name="libvirt" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4a38b0a94dbc84d878a0ed204c537e2108573ffb04e7f44da5cdda4ecfaa31bc" name="libvirt" arch="src">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="cf27deb291ad66bb9f568cfb1430833f6788f2a73b4c569c394aab8ff246c9f2" name="libvirt" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e61c26903269e2ed49508ff7e31b22d1c27baf836d812f1e8c9717148d9aeb14" name="libvirt-admin" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="d3b286b82ef0459bc997c839fb7afcc7faba2aeb734b6e7ff35a67127f580593" name="libvirt-admin" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="198b551efd425c47134721c3a4ddd1ef6da26446871d8d50c476fabe2a06bf92" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="3fec8afc8b0882a2ea29e792159dd50b9ef0c79665ce3b5cc356b6f6862b7d20" name="libvirt-admin" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a21b173959ddf5b52ce4b0919c885a5636bcfdaf9f0ce302f3d66194e1030b03" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="e4054c4d976e3207d61a5a1c9dd34cf60260e397670ccefc7f2327a4b2fe4aa2" name="libvirt-admin" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="3e893b6a0dd3231bf65b710ce1e6ce772da05e43e9a909af7078c7361b7a8ff7" name="libvirt-admin" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="93e99a4ab3dac3e551ad02a2f17d5cb98a7b93334974bf68f96f96d3cfff0e5b" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1c21cc90aac9679c0df49bdf25f43cb2f96bea84491226869cfe6ee4729eda47" name="libvirt-admin" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="77377bed74cb2dc468a1c78d8c73825f8ee546e3970576f0b962b1601c3bcefb" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a7f15b1cf654487d53f5d96756539593b96eadf44033660703e96a5267c3b2db" name="libvirt-bash-completion" arch="noarch">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9bb0b86ba410fb25efe39508ac5777d58f8a0b56cbf08d8d61d7a23887c5c4f2" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="058f3dd59b6e1a418daf4d8f4631ede51ad1bdec7464466c4dc85d9eb81edc1f" name="libvirt-client" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7611e08432aec3f5c206597f2950d9c595b0d4823f99b070175d0efdee788db2" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="e39c64a7b549993b9564ba678e0a77c61c22204c08168cfbd528f61efd046425" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="e6ecd70c905ecac3b730b143c59f5e8a379fe39118f65aae8c10d3d4b89ba62c" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="200a4c6713aeb8ab0eb8cd4bdc4ac07504cd34121c7b8f54fe1bda14ff152d8b" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="48a28a1171e64b0cd4fa1adef7e1a32b13a2946edaa989deb8cfb6dd52d8709c" name="libvirt-client" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="967cb1be0cf97bef8be094605294ce6f237dc318b6086e9c6486b9ffdc178143" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="07641f9b6adc12edfc205d1d0cb68f5ee2b90a140c4a2c47f5f627dbb93e8fd0" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4e92fbdf149fdd60d06937d9dd46de3731f18f9d9dffd11c71f2fa34ed50f258" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b4442714066e1b4c777a0a70c95cb3e636ca91e62f565b95f53386906b4573c0" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="dad23ca187da22d300b36150b3e6e78f784c1c9c37f9b1a88fb25d81f5277789" name="libvirt-daemon" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="76f84515e733c70ea8145d230c7bb6c2f3ea5bd427244476e0aa7c57762f8448" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="e1f29a85754dd00190830fc725bc48fc254d2753ba43112aebfb34a36cffb660" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="b9d1780e72576f24657002528a726d546627e3fc66036857425e88b2306daa76" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="54300f88cda5c3a908e581d84257e8e66400ee488b6f7defee35f4d086385e26" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a6fdbf8f03369cdddad841aff5366f3143a9de1f593f716dddae8ac90af168bb" name="libvirt-daemon" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="adf6bce30e4ce1912d355bc57fbcc3124a93e2a2f99e5d7df83785d28a145d0f" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ae58307363d928950623c2b6bf783fd5c5349593a691d4fccdb9bc2ea1b64d34" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="37eaed08353dc218b6d58abac0f41c0519291b77ccae7c3c181533c36ec3dffc" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8556cf7fbe95239eb2229be1b126eb16e66b7b3ba1111c31aa002c2ae601a22f" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="09a44e965f60bce643d10eb35b3a75a955f4e9c6f231d42dded0deb1b744a891" name="libvirt-daemon-config-network" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="c4df6b0189a238457268485adf55d8312de5369e1433ca517e8d311c8089969d" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="cc6b4c871c32f4c13764dffc7d81de056a43fd6e419bab35523f2b9c258d4a28" name="libvirt-daemon-config-network" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="fca8d0459b094eddc41582e729657fda302531de73e41cf0bbf7da4859b7dd8d" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="ba9579cc0f3851012e1dc0120d79402b52a1b050a39473748b66a87ff57b3aa2" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8154b82143cd7abc48308c0acedd52933eb7b561d4244b48dbb121f35497b9a8" name="libvirt-daemon-config-network" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="196ead84fd3282d74702f8b707750e27936aafef2f6a70dc2e6701d5e8c73f2b" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="73249e1bf1179c8a927caeee0221df98ca641a8ed480c3715954dd2324b8c2ee" name="libvirt-daemon-config-network" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9d263341a978947507a9a1cfad588d1ef26c916eb8c151884e856da8f73420cf" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="54fbc2c45cc5df5a68380fdb4b829debdf42448564dc0d8dffc99fff7a877e39" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="41222aa57f2700c9eb73d63f49f2a55c33edeff6cf14926b5030867342a9bd6e" name="libvirt-daemon-config-nwfilter" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="0125d45f110111b78ff2fbb5fb3372f227bc5e07eb19beabb42364b3defe7c26" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="842bcd3c6b2c4b5d957f01db5b2cb4f37eddb96f9d09a13816766046e4a9d30e" name="libvirt-daemon-config-nwfilter" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="86c44ff1f921b23c330a65d9db5a8e670420615e29399bca39a758617a501003" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="1e82cff354c03d66d8b78ba4b2deb638336c5cddb4f9b53891616d31f82d56bf" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="cfd07f8ac241871b2632ff030a6eee508c72ca5953805b44bd71166867d74765" name="libvirt-daemon-config-nwfilter" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="38adbbb5fde1673ebbf6d4c5c98d7d32c1914df1de3c66f24c9c888aeb877b12" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e1b0f45106353583ff952d36005e8148d5749f978e58eaaaf077ce8b949ea9ea" name="libvirt-daemon-config-nwfilter" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="315ec1748b3e7a20555c37d85295bb58d821a79941acf0bf2487019a97724850" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="3fa3c20f47dcfa4af2aad9035e2b307e9004e0150f29e0b8e81c5f4c7bef1e03" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="15a7a0de371c2a6816edaa2de3949e68c87a649a528d2ae117c50775ac2c168f" name="libvirt-daemon-driver-interface" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="b050959eaa634eec6953818fa3c767af8efc9d7e6fea798a4812c2632f0995f5" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="370fcd277dfcd73ba2b9b6b26a1b7956d39ff9203c51be60649ed143be22ac78" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="87596913b21b0363a072bde43a02b3309b93267dc85f88dc17f221fabfbc26a3" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="bec0fe8154b2077b5723f1347664071b9159e1ed07c1d67f0e38b04898c72f30" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4f66a1ac5b111a8dc6cb4cec491b3ed8baca98f942fd9e93ae3a20e94e2b50ff" name="libvirt-daemon-driver-interface" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="608c755f41096d0a00246b5c7d31646e4b202abd8a9ab725c5144c531baa38d3" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="5001f35b7e6773363a1356235349c51d6fbdcb7839511eab05fe46f87bfa2e63" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="27e01fa7a2e74767aaf6d55dc444868649be66c10c899df370d5179e43a648d1" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9d3acfe3eae4418a6469054604b7387b7952070bd68a3dc38fbb676df6b5e534" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a8ec7446ed6442665012073ecdcbcadcb4c09885fea79ada0eaf8f40d3e109a1" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c36f7f9c9dfbe9ee0e222ec76397787c7994dd1b5ed3e50f00bac0fc9bc79eb1" name="libvirt-daemon-driver-lxc" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="480a560b9d4412b2227c32cd5f0d6ec6e8a4975161cb3722da19dc1455a2b9e0" name="libvirt-daemon-driver-lxc" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a687e6f937a54ffbb015fa30b22eb441b2159489d0c6c912637af4a4767caf76" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="0825de05be53962f5a96f327df7085ed9a37cc33cdd830e6821dc2033dca8d5e" name="libvirt-daemon-driver-lxc" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="9a26293bed1d3071201e226f49646453cb0d02d035803aa9baf3fa032bfda49d" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="eaed44ec26250321899e929026f22ba08a0956e7d819066c6ce41918607fa421" name="libvirt-daemon-driver-lxc" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="57d9c629628c2bc63e3eaf57e3f1d0a16d5a171c63d82e6ae08d5129d513befa" name="libvirt-daemon-driver-lxc" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ce3c2163512993bf5ebbbee9af65fca73d08595e88c5bbe0f749533bace3e2f7" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="7bb6b12f636f6f6d973a7b31414c9a3079268ad43edf7d2e2e8ecc7bc1834b79" name="libvirt-daemon-driver-lxc" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6e225658d6bc056649694bf712df24b493d50af417b5d4459f7570384c14c745" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e7c61b787a048a174b43e205e16285da8b4fb90834dd6d693c575f10c3ea4c29" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="57ce72c2695a209c48661e99b2e19feecd14e94a26b06c8b3f27ee224692b374" name="libvirt-daemon-driver-network" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="db8c1bd949fb188f4545ee46e8bd1325c736830dcb1ea67d3c6c0395df9dbdf4" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="daf4cabead673f5fc1d333e89a735e576a35c7d6b1c206533072da39f61a00e5" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="842b76a73a2415ed566d9c2eff3f8d8052e9c8af534a047c3c94da94be76a5ab" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="99a08fd087fb137b661888e6aaa88dc1ad3f2f4a52c0fbe51e5352b85e60c41e" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9f79baa35b92bc0c32a23c0c3440bdddea658b4fc67968838a9c5b10e1e632e1" name="libvirt-daemon-driver-network" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0dbc413b0cf5dc4397bb1f6ced2023fbcf47533167dd12ca66366234cbb0ea08" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9518d3f70b32e337f9b2e5dae77b55b30104013056d9a8a9a9e9f9364bda11f7" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="00ea6de3bbb84f28c21a5d02f5d7ec62b47fd7a52ce38ce69e50bdb259fb06e2" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2306456735e6a840bea785a88b61348b67aeb182d5543cab4eaee80dbf216193" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="ca00f685a6eba25b099401183fbdc4979d78d328cda05c1e85478a0dcb813ae7" name="libvirt-daemon-driver-nodedev" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="446a448f00fe13a4a472113df90606461ef0dc0cca35e8b6f5d323bcf04951c7" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="82ef5d6e71a1ceb54f296c0face78c1c04b7dcf081643d8bf644b51a170c51a1" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="9ab893be6228ef758fd9da55c4c3d9b38d5efb8c584b64a835495b4109ee8ba7" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="4ea891e0eae87d67556ffba81ce4d75fefce7d5bc84ec0ac0f86bdd3762240f4" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f349680f01215abca91e20d59e3f0386925810d1889ee6d01af669faa64a6297" name="libvirt-daemon-driver-nodedev" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="011a2759bec397d9dce142f293f813bbcde6f2ab51aedcc3754bc26708f0f4af" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d61c83956b47d13282d47258f7b712e332b9422d7b7b9ae4c5e8b37691f7a993" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1b4c438be41bab520e81af482db8d57208dd9bb6cf12a103fd67d959968dc934" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ff9895246c615197c8864062bd4dc0225c0ba409b0d5df545cbd6ab17f313166" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="cc771714ecbb31aa8a68bd15602445f6385634ffbc45ab0df7f7643b4b3bf934" name="libvirt-daemon-driver-nwfilter" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="955e04f5e05421016f7d29cb8c1e77d453d6ce2d0ff6a528e8f3b1e28c142811" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="4c1ee40b60f21321bbb7d3667e2ecce604148bee682b4891ca43a4749397d2ba" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="85b5bf20c59db8f57ad37a96b04394f0cb8ff09068ee13fed22eab72160f9048" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="6d52799ec04e47600921d7e2f5c7804a45d7a0013e428e7e0818b1932345049f" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f23c191f94c5ee73b62ceef5a6329a4a3644bd93eebda44afeecbdc1493657b7" name="libvirt-daemon-driver-nwfilter" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="407d31f9356a5905c8be7c9bbd0d90bc16129c6e8fb37b5b2fa229f8972c5187" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2a9e749d507268b4ce96cd05756daca8ac99ac36c95e05b58c86f6935d6c16b0" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b8c74045b9f01043e8f4f47174aba51fa8e08c07412ae296c8747e705e5817fa" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8c32be4a1234026710de2c266ebd5a3b7352a69acef0783fb40c50ca13c3380b" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="25d8bf97c31bc44301d08eca284da9a2425f4112c8bc9512c1806303a6fefb49" name="libvirt-daemon-driver-qemu" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a1b6f7323e208b8c96a447fe9e9d83f5615cbf8f8b511d743d87edecbd06f1a4" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="5f672cd76818b276034a5d83ec11aaf1373585485595bb5d4e2868f819ba5145" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="2911b0d3031011b245b1aa8e6a57e779005995fe0dbd9d6c3c5eb99962711f06" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="9d97b50a70d880c6ad6a5dc430ce9f93a0f9da30817360a86894ee81f22eb2af" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="72d9774f7516afd47ed9c7c88d7cb8be0668ec18331428841af9faa0da2537e0" name="libvirt-daemon-driver-qemu" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1318624505864daf52d64336ff9c09c95eca1f297502efee0579a834f13eca36" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a39463948ed4db38c47d2ea781db92078f5f90989290b9c16acf109a88603922" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b254207074b2a915c5ff846d539b9a8c465f95ec4b09823209f9ea8fb1bac4b2" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b4b8e35c2e55a274a8fe82801d61c29bc440e4e0e4541e4cd072c9592e1df3d2" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="9ca56005b2dbb19f68fac908fc9cac91095cb94b0088c76c15b502b38b95cdad" name="libvirt-daemon-driver-secret" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="fe33cfb06ba9433e65d1ed6a265d1d0f706a8e66cef340eb70f00be7f4202b98" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="bf2fc49b61eacb81ac4d6687589ad865a5fc309034d65f9892b9d1a4aa51c5a7" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="4386ee8ed0067dabe8b9d191d5d063753e98daac01f9f48a66b129299d3f3b6e" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="cd08f03d1514bebb86bcd6f0d35f602f3d99c28c556a618db8e2c679c3af595e" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4544ec30f07afbfee9f270dcebfaa59c791d1fc6bc3e0414b312191afe8a3c48" name="libvirt-daemon-driver-secret" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="afb800a65e2e2fc1ffc731122cb2dfe173e69b048faf0bf3c672eb72ad05de6a" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8a7c29a320a765bed033a6061dd985c64735d5864c8c0767f97af1ff85dc18e0" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="88c3fd803968914a66c78d2ed573d2661cf974da8d38118315fee0e2ab8c2e6e" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a25472d2e7f5dd354e61bdbe023455070f0876abe6338513dffeb059d22ded7f" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7fd4a82186bc0486099f6a197b89c590591abcc544ad0c50af7eadd10e0ca217" name="libvirt-daemon-driver-storage" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="c9e6b308555bbebe53f03430a265be82d1d9a8f45645efbf98afdf0eb9b00b2a" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a13b0705406d5f5d25487afe7141c661491cae93ce7af1e7a4f020396e37ef77" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="0be9b38770e743b87cbcf9732edae3391400fc71333c24f048e75dbd4be50073" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="2269ae457c9882acafa7b81ee0181838852d6b52c3e93d538eceb41a55c47565" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="5e78eccd941cf8debea6e4fe5f3f96ed42f43e7ce5962a515161c0949eed4b62" name="libvirt-daemon-driver-storage" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2547f80ecb182d3cf0b55d8f43b7518f7c9ccfcd71a528ad3465d3a9ea3ef7e6" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c5cce3ad5ef72a7d0c85c2eea8111643a0f967f667f8d1c9efaccfce77058ddc" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1cc145b5250c4514dbe543b0a82437f4219377a43414b60e7f4c0c6f8951c365" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="20c98b38754ba73b426560128028687a9788cbbdf6a578797e550aba0f3e0c9a" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="f2123aadb7b0f0c1f609fe2fce60e9e09f86ed2c9d5c099e2107696ee6596872" name="libvirt-daemon-driver-storage-core" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="884b99f5f22c5eaed01cdd20f885102e277dc3720fccc48834687c2b6c79a545" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7d458a0f81bf8c9f13126a591aa95cca6491e8ce944a5c030b7f724796aa6bf4" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="aee82e5849e80ae537f7ce5fccea1de652834c977a63a52226187276f97ffdeb" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="6533946f06024fbe5c07b9ddf31cccc384174769e62deac1688eac4f61612b68" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="5510b8347a1c83763d632e83ca117cdf62076465e22273db66d0b2784da1bd23" name="libvirt-daemon-driver-storage-core" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0fc89011d0f31d8f3da960dfcee3db9bf9c7b8ad92b1068852bd0eb96445276c" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="332956df60e606d1ef546620e367f43633cc28286f274f65c381d85ffbe0c578" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="52ec2ec6e44f3a9c2820da8959b2f15c9f25a6e169a340fb183aadb5a29609a6" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="da373a7e8eb7f52af69fbb0149589f92cc706c443cb062856a2bf4ac41386e97" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="b5b4fe0f7cee9b7a4d688295464089194e2f754d562082fdf589f8891b343479" name="libvirt-daemon-driver-storage-disk" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="59d19aafa2ac5ff7635fc9b5881fb807a7dd0f955f0b0f81a6767da3fb3000e2" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="f974004b3c575fc588c51c6a53d4f78f427e2c06bf71c3f59769b27595df599f" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="b3a50c3067f7d269119dac7338702ddf58e38388010481738006f9614e17306e" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="0da95a4bec093460673b581b17c279378e27b49cc7723eeaf56dc975c4e1f1e6" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="49b9bd14445c234f732cea3c2876ee98f196ce7c37f475d11b57c92ddd78a968" name="libvirt-daemon-driver-storage-disk" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c96d22f23f622156c41d1e5a184f1fec0a4dec494a4cfd65f0c114394b1473b9" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ccca93c0088089547ed7e0e7a7a66246db5da16936ce24bbfc6826bacabdcc8e" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="90a7d3b8604bf3816c5a1354abf719c1e981851944b66c6709379c6fc85c5503" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d62e6767886bf951c6c5358e824a1001a1d77b8e5f3cc7b159a7833e77378648" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7042d616eea5d768b49b0e85973e5b2b3ae356a1b99098f0dead34ca7bd2cffd" name="libvirt-daemon-driver-storage-iscsi" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="11c83f30b4e2b82d945df1833c2c160511fd40848ba211fb04fd637687f1a86f" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="30f4210cd6c477bc89885a145cc19932bfc1a2928211a6466f4ca4d2f9238805" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="4ae2fcc7c123b0c8260df697e3fd8d508c274bcd31cbe55cbef9386b1c0055fd" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="46ee202f38b944ba4a44d32700eaab3ee5aa40701e0a5c4f405a5ea92815f078" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2bc27a666979bd536dad8b9222a9eed38115cc0671dcf46c646c8957644695f4" name="libvirt-daemon-driver-storage-iscsi" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1bf416c78d1d9b4e13d216e6e0c9fcffecc35018bfd93470447e46797a50280b" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0fc067984c86909d55b49919d9e3ea32af1eb2ea983674dcad3c7182c5d688e7" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d8776a77f309d7ebf7bed65adff19646f5e10fed9a660439125d90a622ed8600" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ee92516250b05453eff867fff5b16eb4e4f0a555f07c97c8da345b4174c20d06" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="ab6109fb86bf4742e2dcd93c2901223fc8727fa8c8973ec923f00627a397be0c" name="libvirt-daemon-driver-storage-logical" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="0e2bef19015bd20c4fa64e3ef70224273f8d5e5dd7073a88b5b9d0a043cafcad" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="ff0471eb9ef80ba8bd5f6971e7136f749050813344448190ac4e3f2cf8860fac" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="d35efa199289954c72e5106b55124b369876bfd042ee8c61f0a4cfbbff0c1236" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="0f30944038507c89ee981e42bfacee5b5c1a0f831fea0b50f4ad7d22c7ad4dcb" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2e3ebce9248087ca9891a8ec54d62c843e73d58cca3f3e50d181cf11256160f1" name="libvirt-daemon-driver-storage-logical" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a9084854ef13455c52ea36a1e70f6e353aba6ac43244eec19a83a312f00baca0" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8f0dd2e6dd84fc4c49d6e017f8f60828d94b6f5fa7e68ea1fe137e04a21d6302" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c93f1a87ce33dc92a80ca359417d18e91db16adedc7856f28b00a37a102906f3" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1a83228ea5ca4a4d5922899576ef968c6db18e3f1c498cf68622186a80a1821b" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="b26165efb0950f10619e072bc3ddffb85ce4b10ce8ac113a8e101f9d0e739ed3" name="libvirt-daemon-driver-storage-mpath" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7f38bf756fdde7f0c41c9d42ed005f8ff3769964cb049ea49c3b81af754543e6" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="c7cbe6f7ef67861517ffd856067ac33d736300ce48b6d6c6fd0c90eb1ec67ce8" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="65569c4233b21aec11128fd46e327fd93c866c230997840b8f5b52775713f602" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="5601e57230ef42577069a564b05169c0af622efc27a3efceb53d281cc75b09c7" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2e557481b7f8a334e8852e46ecf39f44769757dbf11e6455d0d836a951a7efff" name="libvirt-daemon-driver-storage-mpath" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ba5c3eae89212d9162daf4d39efc9afb35d73c0b2770e32d908ec6172381dec1" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="bb74f20e2ea140cf7bbade72f68711dd212d1eead8b48630ca526278ae633a81" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="42a61789002d183ac1f31cda7168b44b14f1688258d50b36778c1d34c71cee78" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="984a24924e9f86020596537b7014bb3d498adb2a29a0ec4a21307a53c49b6e64" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="cc2f76c27f32e31e1c007868361070665e6c4ba306076830dcf732ca16ca77bd" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="0518efe1010a485348e4c671c5fd1e21c7dac37d17302119b88de52227110260" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e115e58179852d0bd0d531f00b5fe58e894ada3db4a5854a747756e5cfeba921" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="25cce38cc0817aa8739c829ef9c6318dd5e5a096f2bfbdeebb9b12894e51ab0f" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="cf34f146ef3a4e1da6ddadf0763afd02521ad492ee727658b7c61b77e7bbc6cb" name="libvirt-daemon-driver-storage-scsi" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7e340c9c9d6ed51cc31c88bf272a892e80a6d9054e078b7f773881f2d8100eb4" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="bc91cf45231c9f334adfe346d62fd68192b76af03cce32248558ef8e5d7b24fe" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="ff017d3ce056e17611229d8d447b99ea6429a9131915e27b047f72c27695aa12" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="c275a8183235befaf13edc00398df51df40979e9b1bad2f2eedfc19904760fa5" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b23bb129a50a166c303a8f3638203347bb37dfb9a20d43d84a6bf751192efe1f" name="libvirt-daemon-driver-storage-scsi" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="857def62e21a8cab9b9885ee66944266d8e30d82556d198309e39f96df3a013d" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="19e7a041b350c47b20d8c85a3a556f19210974ceb3074ddbd6a6b89a7bb9e6b8" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="205202de47cf54794b857c2d4f89fd4c496215afc91ce9e0c5bdf7d3cbccad46" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0e38e8c7d47f9c89c2676e676615827d84267ca87e4e6fd944fe07637ec932a1" name="libvirt-daemon-hooks" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="1431cfbab045497ac21322eb20d00ee23477cfe9efe404673a83d9872d6bfd98" name="libvirt-daemon-hooks" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="2a25b02ab572e701c8e640b9c922f3b0f88909ff2bc4e8d42269d77faebb218c" name="libvirt-daemon-hooks" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="ceaa2ad5283452d554536d3a3248d60d0ff3f20e9ccc4d53a9d2a9dd26efa15f" name="libvirt-daemon-hooks" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="01eb17320f7e31e40f6166134d1d4408badcac6f95f05887842526bd82fb1d95" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a9122427af7c78b1d64bdf7961116174fd00a9ffa590cb67a5c653459ff73edb" name="libvirt-daemon-hooks" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b348a27e6d18a318e0cdc53a70803adf0a5fbbd0874271131256f277d4326d3f" name="libvirt-daemon-hooks" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2d265002f5698c3897c1c451d1e2491f86349cb22317543f9cf27a062dd0bc46" name="libvirt-daemon-hooks" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e1a412ab90f0ab182dc62cd07d579c5e463b43aad3abc44c3f2961f511c77c6a" name="libvirt-daemon-hooks" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4bd37dd3fa484bfbf46733c8a647780ba9cfc9405eff9ea5e1748cf3435cfcc3" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="707a9546805d878747bd387f06da55c7bed286e5da508b1a8a229d85aaefca1e" name="libvirt-daemon-lxc" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="b6f1418a95a862dc3a6c24d4132284314cffd4ad3396e506f2e165201167a2ea" name="libvirt-daemon-lxc" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="fa0691404515a2795a8bc26c158c66c1830513c592a461682d1791e671db3855" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="6ca6f80d513976da4b52dea22f901a2d2dbb44ef312a08b426456d187d24f978" name="libvirt-daemon-lxc" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="aefcacf87b86887efb670ed7136a8fc87f29bb7618b6367936f3ee96e5b82a78" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="3dfd009427b8391759a812961efd9809f83432350664c77ccd3f84eb30931678" name="libvirt-daemon-lxc" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="057293e6c4907952164412cbc7008189c625d64f079a1d6c0c4de2931e2014eb" name="libvirt-daemon-lxc" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4f8c36ecbb069b8666ef792541da6351eba5471bfdd2c5b980ccdce0bbf2d101" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1799f778c45f16ecc6e08fd6eab54884b77bf58001c589d99c2a691b778f24b2" name="libvirt-daemon-lxc" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ad7127cc7397fdd21003a64e44ee1e1036494bd268942b88b1c9769dc04d6ff6" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="379a8441e27da3a1b5bbaeeab004bc325f4ca60162d80704ad0a9d5d99c15031" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="90e90977ff24648caec5776395a96b35abc60f3da99ebcacb6ec87f6b4e609dd" name="libvirt-daemon-qemu" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a808bfb9276f8075a3652368d2a62ad6b5354b2c3a847ebc3095136311c664e1" name="libvirt-daemon-qemu" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="59adfa4963c170d4509c6eae691e559e10e31db7d2097602cc5bcf488c2c78a3" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="67351ab9f3dfca29f5cdc80c7c15d050deb00b6719d6e7d74125cf51f3925cb7" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="3ad949333161ff774d164a05c9548c2c5b279ef668a723b9c17a6d5feac8ee3d" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1017c537bc68d26582b67fa370aa0fd941a3fd0b99e7f66fafb609bc23ca79b6" name="libvirt-daemon-qemu" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e7348e40d2fd9374f18e70e8aed4a8d5d44fdb35a1928653e9c36de01f6f7069" name="libvirt-daemon-qemu" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="134dc7037c15548d5ed711f5491b64ea8daa9c694d7bb6b012ef131b359941e5" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6b4b4081dc4baf67b1ae125962b5d5a0e0d09bb23982bf85311e8dc34cccb10d" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="874baf6b8b838ccd3a033c0bcd34a1a9d0a6491b4668fc7fa879a7a647e6630e" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="9e7e94e46d6c6f058ee6e745960142c2498a622233012a8f6c9d9bca333eb3af" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="00defa109b8f4be97a17155ba8e15ea07fd3299b73f295ab88d5d006ce8b0eea" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="d0c0988fd852c4ed9e8d9569068e32c4d3c13b3ff4d074fc02bada7409c8f3b8" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4144d60af4168631d2ff8b8dadb6b3b0e86f730bf4361bedac65513ac17ab48a" name="libvirt-devel" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="509d14ee955d98fea8ece420f9a2f1abdf61f80e31bf849341b284a75e79e538" name="libvirt-devel" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="5e38ac53f5884b5f7cad6dd6b510bd72ef88d9aa4f695dcac29d58f79758b35d" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="5c36d95d3f60a2efa1d6366cc8a3770f9471fd8f311395d7d15bcf61e005adb1" name="libvirt-devel" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="80550111b99ce87f515963faa053497848b558b983164b093d26948d0a50ab43" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="9f10ee38c8fac5bf2bde31109dd45d67892e6198359761b77e1980f3f13a6d4e" name="libvirt-devel" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="7ece49d714fa5eca1a11d4990eceb366ae72c45bec7928c5bcabfb1c1c3ec0da" name="libvirt-devel" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f2aca565ce6cee3629177df7110b7f688f792f84d1d47f3e5136be547841e45a" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6f7953fe2fd327ea68f3754b4833831b9371490c4c70b48b1c35733992f215f1" name="libvirt-devel" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="3e1826c1e0cdd9d0bd9e6318900e8150dc452e2231700ceb6e17cfb1150b67fe" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c1436b97917c639b429524fd135d5a33c27970a95ac51c1f9839dd64b70a7941" name="libvirt-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="9049fef585a6925e211a96fe5bf43bf2b91a3ff1891d28b5355092343c5fbce4" name="libvirt-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e2aca9b0a85f3735de14325db7b2e9170459e04c942ea44ee3fb1c5e22c9ed63" name="libvirt-doc" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="cb8a4a251cae5ecbca6378ecc3ede50967048aadd5a685dec909015dae214d4d" name="libvirt-doc" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="46899a7a2f949bc5f4777857f02fd7923cf48bdb9b996d18e11dc02d8e42f6cc" name="libvirt-doc" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="2d68f4c7267f4ade31cbb9c98b98e8667b5ed2e1c8567baa1f8488e64753ada8" name="libvirt-doc" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="929482d2f8612fb8a8aefcc1315d31fce2d2a8de3b62cc1213f6f7a66b26d566" name="libvirt-doc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a4f9780b055e0937c37742ae7dc34c2f681af5cc4f8c97b6777297df4642fbc4" name="libvirt-doc" arch="noarch">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c2addb2ef80fbf40fdbbeaccd47658c8b9c576e064e93217d004d8a3ce0433d6" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="ccc5403f2951aa973b5d106e0f269b5b8f28dffa69b72d9ae00cfae8d534cae3" name="libvirt-libs" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="1eee7c56afa046e3bb0f9116a576b4eeffe87da0b3da32050b3f5a43c968e571" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="af080116a9572ce449bb194ba2984ba25b6de25101ad46c0cca95671818abb85" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="82449c64fab5bb0175e1c0384491cd8e11d639c9336c05e4a2e0cb61429f7d31" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="7a9c21b19e3a78714632f546fb4b6673c53935369f83cc5ec5b3664dba1c4bc6" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="7aa023ce59ff0c713144506f4845250ecb457d151d4395886f55871b5485eaa7" name="libvirt-libs" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="431017d71d63c85e651d05d6e901b781d21f235e1b3d2d4f616b81b8ce79e6e7" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="df863570cf655c30fc2937be3252678db4f7433d1e4d3f9099750fed020e2cd9" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2e686ef181dd8eddb7d28adfea6e1dbe38eef17ce604bb4d02a33491d549fbf2" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="fbc3ebabbfb2a528428557a8b89c197499cf031bde2c81ebaefb4138e74faa16" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="493ed2ee0be175921e5ef53c2add8a602401d4624b8d219982da16d23a751e9c" name="libvirt-lock-sanlock" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="e300b7e3d51b18a5bbe8f3692948c47c9d6eb9389837e24af9d814da2ad41739" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="49168d4e087abd72f986be4510e8ee3fc3c242f061f187916d8b0fe66afe624f" name="libvirt-lock-sanlock" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="26b8c2e6ed82b865eb035328b80c95fd902c169974b2161ad2a848a0ba9dc6bc" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="85f91e345d2542a532f173ca2f612cfd125e7ea8101d2c5e21cf2300481893bc" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4cef288af87979d2215fb932f42c320447f5fad20604c3a3aeb80dfb7c785cac" name="libvirt-lock-sanlock" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b0f4370ca3f3a90af35220709590c76bfe86e99260a3c421dfce49a1e30d481e" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0dae36a26b88f4a534d6d11b746240ebf9d01e51679ccf3217f06b9fe04a13b1" name="libvirt-lock-sanlock" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2c825d99dea23f0a8ce3f059391c4bc3987b4d82255b2d5fd61b0b676daf3e8e" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d1097cd96b26c4b89d83c81dc886d2c51a1d1f3a15dab253a33f72e4d26cc21f" name="libvirt-nss" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="525dd846ce3ef43febe549746bb2f768618c2fbd40850c468a00b18e975187d1" name="libvirt-nss" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="f33019e152b065f3f8d9637407d542b8c36d8b94ed1c978b70eb1f080c98f8f7" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="338b853e74adae1cd3cdb826fbfd9a7eab804b7c6df77870a02119ce894691c7" name="libvirt-nss" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="d3527c0b1c702afb85fd60199a90a8c51e64d4ed610ea1f82840b12042cc1f60" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a30502a488c7ead14b34aee2a6bc53616485905988f4b55603d05d6d9a89b061" name="libvirt-nss" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f3d558cedca56020f5afde09b2e6d36a0ca41c007c6adf19f828cd2e3c76baec" name="libvirt-nss" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b7d9ed796e3a4ac22d1ad98251bcec183a53014875c2441fe0ad466f79540cd9" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8f48b0295734425c84b18a5589027a46f9719e0fa0c41e98543d720f5349d4c4" name="libvirt-nss" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d9ec7d089dbaea8d659ea6dddbc5f88c7994714a38930566e3b273d2676be3b4" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="eed50df7bb7248b6e79c14fd1cad3e91a4c4131ed5fe693e5d463942044d7efe" name="libvotequorum8" arch="aarch64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="fa87077afcee262279427125e270800966507e9c105a4191e10cf8a0d2ed0035" name="libvotequorum8" arch="i586">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="23553144136e2f327212d2ee419ebf6da000b40dee0ce8e9d07ef6a30d406349" name="libvotequorum8" arch="ppc64le">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="ab877dec7c4e98332a43c994a74351916b45028f56984d4702e197bc104d77f1" name="libvotequorum8" arch="s390x">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="a4838e3b29df772706752392876eaae1911e67e7a2cc465cbf14e20619a141c4" name="libvotequorum8" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="927b5d4cdf340d80f6ac203af17d7c63bbb2d26082aeb3ca8135664eda121795" name="libvotequorum8-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f6007af7b28faedb1290046ef2f9b2d3cd846422552a5da59dbf477497cad66d" name="libvotequorum8-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.4.5" rel="5.10.1"/>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="yren@suse.com" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="yren@suse.com" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="yren@suse.com" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XLiang@suse.com" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XLiang@suse.com" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="pablo.bravo@suse.com" date="1590753600">- Backporting corosync-2.4.5
  Added:
    bnc#872651-stop-cluster.patch</changelog>
  <changelog author="aburlakov@suse.com" date="1601640000">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="1b92a5c391e108ad35339251b3537c16dfc77ace97bfdf21fde2456b3adb219f" name="libwbclient-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="a215a529e2f171b82c784831b085d793db076af2b434be10fbf61a95d0e6d45a" name="libwbclient-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="10345f3e1004d589348640f1c74836401846849472dcb018e1c3e0352ad7ec7c" name="libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8d77f615a2b389a8ff05b616d559406120c9cf88470423718abe522d65f1bf79" name="libwbclient-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ec9913371e7def8fb7fde6fdc2c38d100c8a7e9554152c8ad994939dc9fcdd34" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b39c4ea9b18b69ee22afb961be959787a30758f8eb4cfe88d7f27d9b5ccc5aea" name="libwbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="49ecce2d50476842444dbbe22cc15341d744879bd47d8c8c8089745b1f2bae06" name="libwbclient0" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ccf0f20bbecc4cde43d039f08fb2b088cdaf6ce17d216262501a389f083c1f4e" name="libwbclient0" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="9c3e76e0eeb884d776600e9dd052446bdf2b07f415aa4decd76c1547fd8e2240" name="libwbclient0" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="543a04be4055117654ea0a4225d917ffd22e75b1324111c750c72294b24b0fd6" name="libwbclient0" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="c1442e98e2fc72f15e0c9319361beecef1f4958cee2c82a66b68602206124bb2" name="libwbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d154f1b83cf6aff0ea4ac93953b7e255eadfb139bd6c67b0214a7b416581dbd8" name="libwbclient0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8295c94a32bd26001ea82866d6a820ca0abd636e657c508b1b992631bae905bb" name="libwireshark13" arch="aarch64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="525082e39cb39a095b4b22f822906611c7b3eb6a3f5e9cd3fdb8480de3b58094" name="libwireshark13" arch="i586">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="f93d7afca3c2e25cc7ef8fe3b1026d0c6019caf027adcd4d1145acccffcf5772" name="libwireshark13" arch="ppc64le">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="95d046f536b69a44e777628a35ff91d13004e7e87f2c3b604c92e11c058c6a62" name="libwireshark13" arch="s390x">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="fa704a966911905a64c0828d243a03c73a6dd82944547ea276e4fe2c7578b1f5" name="libwireshark13" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="cea525a699db8b77df01a32dfa83d39709daba18cb01645f244c0fb53676d87d" name="libwiretap10" arch="aarch64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="2a705f427e15c97d6b9e9724f74c48bab73d58d26d07d4f6f1177edd3e954fee" name="libwiretap10" arch="i586">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="94d5eec5fdad86a991765cbc7418bdf778423e73e19aa74a9d3b4c0828591b45" name="libwiretap10" arch="ppc64le">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="e0e2b9eb2c9ea202c5ad92b8dd57de652f04edbcd0dc45f1b04b9756e980c4f9" name="libwiretap10" arch="s390x">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="5715de9928f29581556dee9a5f47e6716e6ac4fd58c27b65164b35c08c398809" name="libwiretap10" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="e2f5edf1e47d669ca9a743f85b9946e83a8ad46adf37edbce6472d6639e1b48d" name="libwsutil11" arch="aarch64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="58bbda13e0d07eadae72b4f723a5406c7157b6c22aa0ca1d23b44975a90fccb0" name="libwsutil11" arch="i586">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="44a211feff8990c74246f083b881f229925972715dddc6078fcb61d1bc2eb7a4" name="libwsutil11" arch="ppc64le">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="a4a90bb2a4b23ae7da56efa2a950d0887386adaa583b2198ac43cd45eb8a3b3c" name="libwsutil11" arch="s390x">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="5a771cce58f71c75fead45f2740c1496878241b7f4f31a669222ced4b1f2dca4" name="libwsutil11" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="a024c0bc642c99718eb85ba2cf76903f2f4f129abdf196b35d78b7967bc69f9e" name="libyaml-cpp0_6" arch="aarch64">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="da2e589dc6a8c7264f9c3cc244e0c6da199615cde01855a3fb1da1d010efbcca" name="libyaml-cpp0_6" arch="i586">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="b2961c240edadd9391926b0525aea7e32ae3ce0789cc92a45b16dc3c0fba4558" name="libyaml-cpp0_6" arch="ppc64le">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="59919c6c61e60e8b7e37de2b4e5890cd04e6c567d4457b6c7f508f5bbbbbc7ca" name="libyaml-cpp0_6" arch="s390x">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="735b3a14ccf5a2e38d26ddb743ce32389b101472bab54a4d0cfe8d4ea907e08d" name="libyaml-cpp0_6" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="e6b752eb2b2f0050b6c2df2883ee0ad43943c3b9de2df0cb2b0fb2f660bdcf6d" name="libzmq5-32bit" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="9d7b9b6bb242ff08066149a2bd55ceeb7d8cbdd1f871f14b887a59a326c19613" name="libzmq5" arch="aarch64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="be1bd725c7dd9a891c0de754aa16d266dd488e233d4dec6d95846155de3d88a5" name="libzmq5" arch="i586">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="c71191aaf3d8fc364b2ca7b4ebcaacc344d89223c4ad1e0a0cd0515644b89984" name="libzmq5" arch="ppc64le">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="b7efc41ad4ea61d49af42029eb5edd8fcef47b17f0e1dcb2794a0625f5f4e8ec" name="libzmq5" arch="s390x">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="7969605c576736620de60831f4bd480df3987d90225fdd2c5c88ac5939b5f3f3" name="libzmq5" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="5281fc34a7a31580045ee62c1585c209c1553337bafde5e106d671314216c036" name="libzmq5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="395ca937acf0a689f3726ff3b881099f767f0d856acdeb77a3c022c6c836cd3c" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="1b18082f231481b207bbf48014ada48698e18bef44330d23a13a272b87cc0343" name="libzypp" arch="i586">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="01a3ac7db77c4bed0f978bd59c826f70a9a011740f242c70b975b6071d673ecc" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="dc383fbaf3c191b14ab390526c0062185a4c427c772ab32e91bfd4f351003de4" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="1b0b71623767dd1476686385602f2c2794db2b340e286eb5e24f0b926d92e060" name="libzypp" arch="src">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="a2bb04504294bf5d136f25596e18de040e26c3fe081a50880b63d62e0909573f" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="0b0acb4d5c7ccc0297e99759b5cd95a2c7560f41e4e30cd78c2eb1bef1c84806" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="b189358903f254c1f6c794b751d7900a8c92e997e354bfd88c752f97fba6f719" name="libzypp-devel" arch="i586">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="a37e9a7cbbbd5edf5fcb9826be454039398a07bc583181073c77323cc5b4d2ae" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="17500c379bc3ff0075094666a558255a65664d17f96d4c91254332ddd6658a8a" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="56f514574675a2538bef598d0c8a210a2427582b7493d1f96830a60bfe3776b3" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="7656f8dfe4277652eb52306e58f42033b8ec9efb80d59ad64a8c9084bbe37410" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="eff76eaaef113923646738fb5e74608998c091293d905b9cadf15d34f4168aa8" name="libzypp-devel-doc" arch="i586">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="d34406a92fbfb98cefc453a5315c6b5e4e0fb98d9431f22f3374af17f0766fdd" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="24708b02a8d7b056a7b0dae64e06e8d002f3fd20b6d9247f6689e5a07d6aacd6" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="60ecd8b51ab5d3551872c7a361a6feef8fe922a53ae5eef45d96fd46800df97c" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="8f39a6ac00aa78f337b8afecafb43a7d64225aa8ab0123b32d970e66194da4e3" name="lifecycle-data-sle-module-live-patching" arch="noarch">
  <version epoch="0" ver="15" rel="4.39.1"/>
  <changelog author="lpechacek@suse.com" date="1559563200">- Added data for 4_12_14-150_17. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1562673600">- Added data for 4_12_14-150_14, 4_12_14-150_17, 4_12_14-150_22,
  4_12_14-195, 4_12_14-197_4, 4_12_14-197_7,
  4_12_14-25_28. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1569326400">- Added data for 4_12_14-150_27, 4_12_14-150_32, 4_12_14-150_35,
  4_12_14-197_10, 4_12_14-197_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1574942400">- Added data for 4_12_14-150_38, 4_12_14-150_41, 4_12_14-197_18,
  4_12_14-197_21, 4_12_14-197_26. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1579089600">- Removed duplicate records and added data for 4_12_14-150_47,
  4_12_14-197_29. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1584964800">- Added data for 4_12_14-197_34. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1589198400">- Added data for 4_12_14-197_37, 4_12_14-197_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1593432000">- Added data for 4_12_14-150_52, 4_12_14-197_45. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1596715200">- Added data for 4_12_14-150_55, 4_12_14-197_48, 5_3_18-22, 5_3_18-24_9. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1600776000">- Added data for 4_12_14-150_58, 4_12_14-197_51, 4_12_14-197_56,
  5_3_18-24_12, 5_3_18-24_15. (bsc#1020320)</changelog>
</package>
<package pkgid="10e3e3d71090b0033a91bf3302469e3f3e83cf72ea40a9d20fd47a039c3178a0" name="lifecycle-data-sle-module-live-patching" arch="src">
  <version epoch="0" ver="15" rel="4.39.1"/>
  <changelog author="lpechacek@suse.com" date="1559563200">- Added data for 4_12_14-150_17. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1562673600">- Added data for 4_12_14-150_14, 4_12_14-150_17, 4_12_14-150_22,
  4_12_14-195, 4_12_14-197_4, 4_12_14-197_7,
  4_12_14-25_28. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1569326400">- Added data for 4_12_14-150_27, 4_12_14-150_32, 4_12_14-150_35,
  4_12_14-197_10, 4_12_14-197_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1574942400">- Added data for 4_12_14-150_38, 4_12_14-150_41, 4_12_14-197_18,
  4_12_14-197_21, 4_12_14-197_26. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1579089600">- Removed duplicate records and added data for 4_12_14-150_47,
  4_12_14-197_29. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1584964800">- Added data for 4_12_14-197_34. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1589198400">- Added data for 4_12_14-197_37, 4_12_14-197_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1593432000">- Added data for 4_12_14-150_52, 4_12_14-197_45. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1596715200">- Added data for 4_12_14-150_55, 4_12_14-197_48, 5_3_18-22, 5_3_18-24_9. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1600776000">- Added data for 4_12_14-150_58, 4_12_14-197_51, 4_12_14-197_56,
  5_3_18-24_12, 5_3_18-24_15. (bsc#1020320)</changelog>
</package>
<package pkgid="da839bd21e519d5cd342a659d4f41af5a989bb88018e5f259fc34af3be472af4" name="lz4" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="29bb464856dffbcf78430966bd2baf67dbc206f45448781dc0f8f5dfdf830c83" name="lz4" arch="i586">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="8c4a6ae23fbbfec193bec8462518e5ecd17dc6466adb92f179f94f5572716ef4" name="lz4" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="e5a4c081e8cf4c2bfa40d6c7abfef985b4dec5e22fb92de99439e2a48595d1ea" name="lz4" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="defafb8859aa24bf3b3c9c20d1b925e600912c9da14e3a003b75248636de0f88" name="lz4" arch="src">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="1b19a1fcf10f950f0b0b3c00b2007cbd1b62353105b4280d3b728242a3683681" name="lz4" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="9c708f6cbf14e49ffa8a904cf7c91be6395e23a06360518ea6c0296d05c58bee" name="mbimcli-bash-completion" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="eb32c9ae73575df591b57d01173bc9219afb938bde66fe9e6dc9256335f239d6" name="mbimcli-bash-completion" arch="i586">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="a4a28f4db489e94a2bf8b059b4ad8285186345b408bb4112e9e034abea830796" name="mbimcli-bash-completion" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="e17aea573ce63d86bb87ad6cd1908d3a6ecf8defc61db4a2282bd9ff750ca642" name="mbimcli-bash-completion" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="8003f678d4d8dc1816dddfe0bff14a777448a9f7bae8210b1e52bcfcce632073" name="mbimcli-bash-completion" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="3.2.1"/>
  <changelog author="ledest@gmail.com" date="1417089600">- Add libmbim-1.10.0-fix-bashisms.patch: fix bashisms in
  mbim-network script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1422446400">- Update to version 1.12.0:
  + New `--enable-mbim-username' option during configure, which
    allows specifying which will be the user owning the
    /dev/cdc-wdm character devices of all MBIM modems (udev rules
    are installed to change file ownership). If this option is
    used, the mbim-proxy will only allow connections from processes
    running by the specified user or by the root user.
  + Function error messages can now be returned by the MbimDevice
    as responses to `Command', `Open' or `Close' messages. Users of
    the library should not assume the type of message returned to
    the previous actions.
  + The MbimProxy will monitor for 'NotOpened' errors, and when one
    detected it will directly close the internal MbimDevice. Any
    subsequent request sent by clients to that specific device will
    be aborted with a proxy-generated 'NotOpened' error. Clients
    will need to explicitly reopen the ports in that case.
  + The API now has a new mbim_message_response_get_result() method
    which allows getting a GError from a message which may be of a
    specific type (e.g. a `Command Done' message in response to a
    `Command' request) or instead the generic `Function Error'
    message type. Users of the library can use this new method to
    avoid assuming the type of message returned.
  + Other bugfixes and minor improvements:
  - Attach timeout and idle events to the thread-default context.
  - Fix bashisms in the mbim-network script.
- Drop libmbim-1.10.0-fix-bashisms.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422792000">- Update to version 1.12.2:
  + Fix assertion triggered by a bug in the removal of unreleased
    transactions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 1.12.4:
  + Updated '--connect' arguments to allow specifying "key=value"
    pairs. The old legacy "[(APN), (PAP|CHAP|MSCHAPV2), (Username),
    (Password)]" format is kept as valid for backwards
    compatibility, although it should be assumed deprecated.
  + mbimcli:
  - Longer timeouts for connect/register operations.
  - Report IP configuration when connected.
  - Allow specifying session ids.
  + libmbim-glib: probing retry interval increased to 5s.
  + Some other minor fixes.</changelog>
  <changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468238400">- Update to version 1.14.0:
  + New support for the 'QMI over MBIM' service, so that clients
    can use libqmi to build messages and libmbim to transport them.
  + The GUDev library, which we use to read the max message size
    from the USB descriptor, is now optional. When configuring, it
    will be used by default only if it's found. It can also be
    explicitly disabled using the new configure  switch
    '--without-udev' or explicitly enabled using '--with-udev'.
    If GUDev isn't used, libmbim-glib will rely on sysfs directly.
  + libmbim-glib updates: Added support for building messages of
    custom services.
  + mbim-network updates:
  - Added support for loading profiles from different paths using
    the new '--profile' option. This makes it possible to use
    mbim-network with multiple devices running in the same
    system.
  - Added support to allow specifying APN user (APN_USER),
    password (APN_PASS) and authentication type (APN_AUTH) in the
    profile.
  - Added support to allow using the mbim-proxy setup by
    configuring it in the profile file (PROXY=yes).
  + Several other minor improvements and fixes.
  + The following features which were backported to 1.12.x releases
    are also present in libmbim 1.14.0:
  - mbimcli updates:
    . Updated '--connect' arguments to allow specifying
    "key=value" pairs. The old legacy
    "[(APN),(PAP|CHAP|MSCHAPV2),(Username),(Password)]" format
    is kept as valid for backwards compatibility, although it
    should be assumed deprecated.
    . Longer timeouts for connect/register operations.
    . Report IP configuration when connected.
    . Allow specifying session ids.
  + libmbim-glib updates: Probing retry interval increased to 5s.
  - Split out mbimcli-bash-completion package, requiring and
  supplementing bash-completion.
- Pass --with-udev to configure: new config parameter, but keeping
  the old behavior (it was non-optional before).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Add libmbim-plug-mem-leak.patch: libmbim-glib: device: Plug
  memory leak in open timeout, patch from upstream stable git.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 1.14.2:
  + libmbim-glib:
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  - Fixed G_DEPRECATED_FOR annotations.
  + mbim-proxy:
  - Fixed segfault when device goes away while being opened.
  - Avoid receiving signals from the parent process.
  + mbimcli:
  - Fix second ctrl+c handling.
  - Add cancellability to the query-ip-configuration action.
  + mbim-network: Fix bashisms.
  + Several other minor improvements and fixes.
- Drop libmbim-plug-mem-leak.patch: Fixed upstream.</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Enable tests
- Do not rely on env for python during build
- Run spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516622400">- Update to version 1.16.0:
  + All the code base was ported to use the GTask based
    asynchronous operations support instead of the deprecated
    GSimpleAsyncResult.
  + New support for AT&amp;T Device Service and Intel Firmware Update
    Service.
  + libmbim-glib:
  - Added:
    . MBIM_STATUS_ERROR_CONTEXT_NOT_SUPPORTED to MbimStatusError.
    . Support to detect already open MBIM channels on the Sierra
    Wireless EM7345.
  - Avoid using iconv() directly for the UTF-16BE conversions,
    which makes it possible to use libmbim on systems with a stub
    iconv() implementation.
  - Prefer realpath() to canonicalize_file_name().
  - Added MBIM_READY_INFO_FLAG_NONE to MbimReadyInfoFlag.
  + mbimcli:
  - New: --query-ip-packet-filters, --query-pin-list action,
  - -atds-query-signal, --atds-query-location and
  - -intel-modem-reboot actions.
  - Add cancellability to the query-ip-configuration action.
  + mbim-proxy: Avoid receiving signals from the parent process.
- Add pkgconfig(gio-unix-2.0) BuildRequires: it was being pulled
  by another pkgconfig module that live in glib2-devel package and
  used already.</changelog>
</package>
<package pkgid="7a59d412dd20d85ede3efe9d3da6fb30e1dfb7ffc7a273a1cd812c1203cce490" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="4ef15e41151b0e64c2960ebd391733e31459d0034c52b3579cbd90f0acfb1e73" name="mdadm" arch="i586">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="380143d1878b6d05d88d4f816b97b15dc095004b55af4a0968ae420f37c17f2d" name="mdadm" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="aaf0ded1e584903d2064398a622adeedc72c0693d5df555bfc964626694be2a0" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="03641bad44bfc0faf010634d98494b49e0b71162152e2949df3ba3476aa1ff56" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="c25e0c004a191733e606a24cb9a95dea3c5ac433084774e2e27ff6ea13e0c084" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="258eff0cb884c234cf701419659ecae02044ad022f6e5b185b7b7f1523796503" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="0f0f77df9c2f599ebeb4435f9a41152760aa8d5329b4e1f586a390d399e9d05b" name="mdadm" arch="i586">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="613d1f3791ef87326f16625c3e39adc1453fe431eab304abfac18b5901d1935d" name="mdadm" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="afda1b421fef5a7b7a016bd105a65deeacb45a60e63260659a5ac7ae91d0f8f3" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="fa3c85f2f0c88bca249ec85ca98ae5318650a49e55a99044a8938f81ca02acce" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="7aa740b596cb4e177827ac59746d4e042b67df3b802870a9170c81b75a74ad0a" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="ef83b0758a31ce5e8b734167a692371e081433419a917ffa0d33d3da6fffd1cb" name="mgr-daemon" arch="noarch">
  <version epoch="0" ver="4.1.3" rel="1.20.1"/>
  <changelog author="jgonzalez@suse.com" date="1522065600">- version 5.0.37.1-1
- Sync with upstream (bsc#1083294)
- Updating .po translations from Zanata</changelog>
  <changelog author="jgonzalez@suse.com" date="1533902400">- version 4.0.1-1
- Bump version to 4.0.0 (bsc#1104034)
- Rename package to mgr-daemon to allow version 4.0.0 (bsc#1104034)
- Fix copyright for the package specfile (bsc#1103696)</changelog>
  <changelog author="jgonzalez@suse.com" date="1540555200">- version 4.0.2-1
- use rpm for debian packaging</changelog>
  <changelog author="jgonzalez@suse.com" date="1545048000">- version 4.0.3-1
- Add missing timer file
- Sync changes from Spacewalk
- Regenerating .po and .pot files for rhnsd
- Updating .po translations from Zanata
- 1091025 - Languages are not needed on systemd
- 1091025 - Make package noarch on systemd systems
- 1091025 - Fix building
- 1091025 - Replace rhnsd with systemd.tim</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.4-1
- SPEC cleanup
- Fix wrong bugzilla entry at changelog</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921601">- version 4.0.5-1
- Obsolete newer versions of spacewalksd</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.6-1
- fix systemd timer configuration on SLE12 (bsc#1142038)
- rhnsd service was replaced by rhnsd timer (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Bump version to 4.1.0 (bsc#1154940)
- Adjust current name of the package to mgr-daemon and not
  spacewalksd (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789, bsc#1150216)</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.2-1
- Remove duplicate languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.3-1
- Update translation strings</changelog>
</package>
<package pkgid="5c57cae18b9027017c46030d560fae8e7e8cfa3657fcea3e1aa8fc772510a128" name="mgr-daemon" arch="src">
  <version epoch="0" ver="4.1.3" rel="1.20.1"/>
  <changelog author="jgonzalez@suse.com" date="1522065600">- version 5.0.37.1-1
- Sync with upstream (bsc#1083294)
- Updating .po translations from Zanata</changelog>
  <changelog author="jgonzalez@suse.com" date="1533902400">- version 4.0.1-1
- Bump version to 4.0.0 (bsc#1104034)
- Rename package to mgr-daemon to allow version 4.0.0 (bsc#1104034)
- Fix copyright for the package specfile (bsc#1103696)</changelog>
  <changelog author="jgonzalez@suse.com" date="1540555200">- version 4.0.2-1
- use rpm for debian packaging</changelog>
  <changelog author="jgonzalez@suse.com" date="1545048000">- version 4.0.3-1
- Add missing timer file
- Sync changes from Spacewalk
- Regenerating .po and .pot files for rhnsd
- Updating .po translations from Zanata
- 1091025 - Languages are not needed on systemd
- 1091025 - Make package noarch on systemd systems
- 1091025 - Fix building
- 1091025 - Replace rhnsd with systemd.tim</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.4-1
- SPEC cleanup
- Fix wrong bugzilla entry at changelog</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921601">- version 4.0.5-1
- Obsolete newer versions of spacewalksd</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.6-1
- fix systemd timer configuration on SLE12 (bsc#1142038)
- rhnsd service was replaced by rhnsd timer (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Bump version to 4.1.0 (bsc#1154940)
- Adjust current name of the package to mgr-daemon and not
  spacewalksd (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789, bsc#1150216)</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.2-1
- Remove duplicate languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.3-1
- Update translation strings</changelog>
</package>
<package pkgid="b94fc7faeaba70ab89d98d87f66ce1e43468c3e600fd7f1c6d1a6dc531f7b064" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="ba8867d51b940841140748ef6e5b46f02bac4b49abe299563f283026937a9aeb" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="643f37f25d0f1f4f43befb593128ba118b4302dfc3ed6561d0a8d0a83a576f8a" name="mozilla-nspr-32bit" arch="x86_64">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="1d7b0effee153ecc1832c6defa455078dc263b8c3fb936a2c36f224d9a41c37d" name="mozilla-nspr" arch="aarch64">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="0cea24a66f01ce15da3781b5ea8f3c7a944e259a165b23c5d35b95cdbd43a48c" name="mozilla-nspr" arch="i586">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="51e971853b04fec20a43734c45444960f1cbe7ca5a030b50c08fbc96e1922127" name="mozilla-nspr" arch="ppc64le">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="a157cf24c4455947050219eda9d08d345cfc3412d06a4f26bb3651ac3e1344eb" name="mozilla-nspr" arch="s390x">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="61135634864adfb7ee7d2bbe13ec709f6132ae14d55bbd90cbecaa88976d5559" name="mozilla-nspr" arch="src">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="e78c2c7b41eaa15e7581ca3a2f15da447233114eac8ec10611c1b7d6fc01a3d6" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="93f8d1a24985643cd7a55332581cf261db01ad8c3fb6e7e3bda26a81a31c136d" name="mozilla-nspr-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="7d02377e75a6c3a8c8f35db5f617ab2bcfcba885fbe49a2f8997748adda7d8ac" name="mozilla-nspr-devel" arch="aarch64">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="8613da599d1dc521258c7c3070c52e87d6f0637823d8afcd6e64246c0612bd38" name="mozilla-nspr-devel" arch="i586">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="09c6491ac9bd8ce59f5e1ce40d8a841092123012acbfc56d17a6d59d257aff46" name="mozilla-nspr-devel" arch="ppc64le">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="9f5acc73ef1828625a397a8d436305a692ae149a7107963664098f377ff03af5" name="mozilla-nspr-devel" arch="s390x">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="2ad29f7c07ce3dbf9c8a26cc7b4e885fa519f72375bbca9fd8e93eb6edb1ec8f" name="mozilla-nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.25.1" rel="3.15.2"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- update to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.</changelog>
</package>
<package pkgid="8fa968801101d7f6b46790f6fe3e88b25a65468209d75850a1a53f625a003291" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3f01080f049ea0618b3d6b3921742e1f0c43c0260ee1bbdd3a8824ff7da8fea6" name="mozilla-nss" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d58f8a09951e9e64869fe070ff1d12798762be22128afc78abeba3878a163692" name="mozilla-nss" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3c7edaa475c1eb5472032e57d7c089c10442aeafb05f6ff3b5fd8a8cc8651674" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ce744c9a9e7d7dca84eeb03d892413ca368d07d3ad7d437e083ef02019193bb5" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d150fee5e0d83d3b15f6a6fb638655eb654510bc09910cfcd5a7f9985f5d2da7" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="031126aeb1b7db38ae6bda0c17ec1f60cc81e511963f935f33344fa66fbe15ee" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9fc63ccd6ffd45abb93fb1027a4c82213684ee9e1c6a7eaead9a461734bbd5d0" name="mozilla-nss" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9ab2ffc1629414f8fbea9fd46049407de392e7fcde6a64e02b0b4cad11ebdd0a" name="mozilla-nss" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="2f3f057f24ec84af14376591f0c57bda1acc89e1f9e232ccc35ac64cf830d955" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="c04561152fe03bc3a7ce6926a4243ced1abb0ba83a91d4fe28c1d148a9e4751b" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="458c6d24b06e6d604114861e9ddc82f0b51ed07fcb49483862dd66447cb33c1a" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="8dabe27b6527f6fe60b4757696f7928a93dc045f3748a9ed857c282c01b6afa9" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="396d3d29d2011d7f527e85fb3a2146182ed335b05f693bed2ee65c66a6a6f29b" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="cd6e1a8fb31b5be40c74fd617c98b49456fcae02fb8b2b12edf51e3381a5f5ec" name="mozilla-nss-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="e8f0866c50a50e73206dd94a62e4063a8b4f72df053f720a46d38d30f9fd781b" name="mozilla-nss-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="8eade543facc11085c912b8e84582add9ea6d06aa33cb367c1b6d9341f5eb05f" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d82a1b5f6f735573607ed30a16d6a739cb49277a5a8acdef976157bba4f2ac07" name="mozilla-nss-certs" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="421a884d25d2427245ad2a5f58ce09d27a4ae0746b190b7b5aa472be6cf556ba" name="mozilla-nss-certs" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9c9a230eb3ed8bc7ad6fc443b9dff1e12a5366535756dd126e0e00e12cc366d1" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="212e50c64509823ae2e7c97c29bd6d833006eb20cdce9ca9ff4a1e506906ec4f" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b2980f5ab282cf86f13a41276e7296202154c6ac70b54dfb6a90dc80faec88f1" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="fd376ff8974ab7bda0a349c6295153e85d99f66a024fdd77a971dad39ec0918d" name="mozilla-nss-certs" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="a91798265f5f72b447890e30ddb3687b768f7a64a7c7c8c50ca1b745a63f006e" name="mozilla-nss-certs" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="8315ef0dec251a6c03618536a628bad74d84dfe4e243b8bc6560d58f38be98d7" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3485942b16ec6819a8d80cd21e651579348e5a0368f33ad4f00dea3d21ddc4a4" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="5b24dcd873e2a8136d662fdc2855b8ad586f5f3c5962570996b7397e5d344acf" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="78f517e3f41985b679a5a49115087deb5cf120de8212781b313dba6e2e43cef5" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f2de59d237a5b326e4c7a6d08b0bea097b0bed04085b3af018c49af23e1a953b" name="mozilla-nss-certs-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="dc62e39432dcd86ab82dff538681aae2283b6f40819c7ffafe3db5a8f931960a" name="mozilla-nss-certs-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="efe764ee6c0d86571cec884d4d3759d26f63a14d8ff94e0e09952df4fa191a43" name="mozilla-nss-devel" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="7dede0199e050f5f0087404f4acacdebfac581910ee600d3d8d7d539235eee87" name="mozilla-nss-devel" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="2f870cbf01466f8f3e9da8fcbb95971cfe01c42aac94005b02e75936aa125cf7" name="mozilla-nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="857b4bc76f4201334a5203128a0631e034d07e058b7e782c1e72165079dcf6ba" name="mozilla-nss-devel" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9088e3e92fb636ee53773a6e123d401fcaabe04e91567f3cff13e80d0f59d367" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d81f49c013c27bfb54f11a098b41fca21eecea9e1e39104907721fa655cfb5ae" name="mozilla-nss-devel" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="bb6fe073f2b9b21a071e6d2737f3db3b50b9c437a598cd9fb2b0edc32adfca65" name="mozilla-nss-devel" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="75586e32b457f4775f66549213317c6831afc05bd38dd45ebffa067cc00c1c1c" name="mozilla-nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="e40bec6409345e4af2d53f6113e08fbb567ede23915fba8d86cfe7769fc00d60" name="mozilla-nss-devel" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="13285f105e1f3ed284ad8752942defab941f57cf89966b692d4f1c3cf69b407b" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3da6daf8f26d5c92e4a46e13d33614f64950ecf40be7d02d173479c2e9ceb42b" name="mozilla-nss-sysinit" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="7483bf2f1002608b607d80ea10f3c4e267663061c26675557517c69db38ad79d" name="mozilla-nss-sysinit" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="5d5eb60f7c5d0c5c5f822e8ecdc34c38c1e230113d6e9d2f36ec2bd28e774c77" name="mozilla-nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="81ccb6fc24befc32a1f717b049cbb3db75581fe91fbb14d0ad14cb25a811e2b2" name="mozilla-nss-sysinit" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ed96bfc60075e5107d1aad3c5dac32104fa7ebe9267ae125aaee115f1ddb9089" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="21cce73e045594b4191341b352698df3269fd3b3d50febc21549c4eecfbd457b" name="mozilla-nss-sysinit" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="cce73cdf78d32946d866f83d31bf238200dd8b47476d9ed0de77c183dbe20f25" name="mozilla-nss-sysinit" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="00ec7f790c1231320b8c2e973f4d8e30fb359d1e3d1955e8beb2d6bff0985b12" name="mozilla-nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="a3397870e1eed458315b03551d87f4fb19edfa0fccdf228f1793c415c3404d4d" name="mozilla-nss-sysinit" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3df7f6dcece3574bfb277e493beffa4523bced9399dc00f8bdfc7f2f32879ea9" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="08f054a30e7810e8abf4ed179ca97971c72f4a680de21ba8b3f0cb1e558178c4" name="mozilla-nss-sysinit-32bit" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="082f8d5c2326cbb027cd37bc3bc6b795b646fd2657049a211aac0b69b5f72cce" name="mozilla-nss-sysinit-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b87f5b7d328928462ab7f3b6156c0a2f37c674417f4b4b6640f83310799c96df" name="mozilla-nss-sysinit-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="1867a74d96a919ef442d51d92f88d8d9d91ed97d9c34cc257ebe4204948d2662" name="mozilla-nss-sysinit-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="69862b04ce57375e308ba42d02e1f1859a1db9b8442ba98eff1ee9e2c1ccd448" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="94ef89430a16165c02ac0b5ac92007e6c9d3f43b193636ae20e63ab209a1fdd2" name="mozilla-nss-tools" arch="i586">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="a6b9d797a78bed792a318c8ae60c3d78c3d7f548923ecef86048d69fd6465da2" name="mozilla-nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="0837b9769211fc54d4de1b1f8d6fc079002421a8c48857d217213ab62bcc3379" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="bd1af0a1663a50b0eca0bf03663e7da045c9e3d9b0d1e97cc80c93f97c881d35" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.47.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="hpj@suse.com" date="1599307200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
  <changelog author="hpj@suse.com" date="1599480000">- Further modifications for NIST SP 800-56Ar3 compliance. This
  removes code that was strictly unnecessary to achieve compliance.
  Removed patches:
  * nss-fips-hkdf-refactor-1.patch
  * nss-fips-hkdf-refactor-2.patch
  Changed patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="88b86e12e7014706bf771159575d46952ca237d9ae1675afe5fd978418e2a2b7" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="5b0dce21e165566a57b46327be6999825f66622f7c27aa80a8c195a804877c40" name="mozilla-nss-tools" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="72fa351a78c01adb1c7f978cd62c0f1ba4098b1d239ca63a46031f67e58d40fb" name="mozilla-nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="a7783881c77b0a8d64c2f2c896a8c3d53462a01737bf47059d10b7fa86c0ad72" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="77991af8a7e9896dc01077a95dbddcfb021cadecb0a0603f9030bb95bf321ee0" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.51.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="e18076cc36d151aa3109e41a3f58af0506e0f71090cb2db95fa6073f96225d85" name="myspell-af_NA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="2b327e1d1c053905c240603aa4a160038b5eda092459a68fb034daa0808dc653" name="myspell-af_ZA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="1d6bca4e74d63d1b0715f193e561b1f7a58b412236f39e28b7b8fbe5fa854787" name="myspell-an" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="bd98753062570d34afdedb0f1ba280df2cc6bf920b85bd24e2f67f4ffe4e5704" name="myspell-an_ES" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="13a52c1d7fe1f3e00915b3422ad1d83ea2785c1748b25ef47c9238a789ae4a5e" name="myspell-ar" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="ca5eeee6a256ebb1fc799a547152ceb4a4d0dd03bbf96dd8ede126d085405020" name="myspell-ar_AE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="2ce7d37da2324b3a7b57f0d9e09b18677980964481c1728a12faf8a9dd40c8f6" name="myspell-ar_BH" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="0d7a1fafd703619ac070ab208763d0fbb5519ecb4a3da56c46b489a5ac39fceb" name="myspell-ar_DZ" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8c5d330344e0acc96eafe780eff6cb1ce5d6cdbb04f8335a9c1a48b94bcc392a" name="myspell-ar_EG" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="926d1751d19c6f66adcbf26f03155d02f6bf042da907bbae6c3d920bf24db3c0" name="myspell-ar_IQ" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a1ce7bcdaf364e01edc22a77b351540a93e632011f8a5edc7b0f4f2b3e4fec66" name="myspell-ar_JO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="55dcf1dd94ecebd5905bb34a3d3c9ff41dfcaf4dd9ddde94fce733acc59d5f1d" name="myspell-ar_KW" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="7def4be364f00478f2d3af9c34b9160f5d12a02289113d6025ccb604dbe8efb2" name="myspell-ar_LB" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="65f853c71c9e16026f79c42283168211f48b73102023bcefa65dda9dc0f432e9" name="myspell-ar_LY" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="45ca5b211abfbbb69341231956dc035cba774cd6acec6a73c021dd37b934d34d" name="myspell-ar_MA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="e6eee593c06b5b0200107105a8075d716c287ac3407a42d77f3709bba6913f84" name="myspell-ar_OM" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="f51388749c4bdf147965df1268cf139c8a38bb879de1a373b4e08f9a0773c394" name="myspell-ar_QA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="75219a411dd79b9f528b500db06a70c12465eed75d02b038df2b50c7941293ce" name="myspell-ar_SA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c46670fd201e72096d8a024cc890f9bdc49476495fd0eb0a4ebbf2c5e3ffa251" name="myspell-ar_SD" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="77d37875b41487a90f855b63866d0f06717bb77740f1894fe73c8c1b4007b31f" name="myspell-ar_SY" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="ab815b4e6a794a28eaac9c0f8febc2ada15a801dc5b46de86a80e54ab2395d99" name="myspell-ar_TN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="105f3977d243d4ebcefe7f84b5e4bd589a47d5d791ca11bc1f7109bce3945699" name="myspell-ar_YE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="0282ba8d5a1b3803df42c67cef0727880b94776fefb880fb928a1b79853c1822" name="myspell-be_BY" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="80378a1852a3aea7e20c813d75b311328cddb8f978349c3561de30555cc78b85" name="myspell-bg_BG" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="19a386909ed5429856ab9072f36bb594e820c89631bcc8d81ab98c2efde45dac" name="myspell-bn_BD" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="75f1d1191ad15bccb6a5bfe4a07c0942b0a75edf80b91b4a2bff15e9373a8d56" name="myspell-bn_IN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="9de7d27f06cfbb2ffc29f8635f2915ee0d9965eeccad9fe8cedb6d49f4323ab8" name="myspell-bo" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="e99add6131dd60452432108de4906194b716ac26028ef22c418b7ce90c0ed710" name="myspell-bo_CN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="38a6bef84f63db9c5d3797eccb1f05d10b89af169f11727886b176f5d65ad8df" name="myspell-bo_IN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="83c61a8bc68de668ef1b33bc30371bd955320ab25722e03bb6f7962f5efcd8bc" name="myspell-br_FR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c20269914465c214d22984518c96bbbd4f515c38f0dbbfb039c3978fb8d5848b" name="myspell-bs" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="eee3a8f8809df066ce00f967d0693074d549f029f1ca3f8149c6d423c79cde4b" name="myspell-bs_BA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="3a6d02368226be6406498b2801d872bab4dcdb5fdfad01b23ee859618d503942" name="myspell-ca" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="2e602ec96ae5da286b2f8db4ea7d008894ee67001a1ad65688f90e10b58d5464" name="myspell-ca_AD" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="eaf53798b90b4f50a1d724d05aa023d39cc30435a1a6a223635bfc3341ae27e3" name="myspell-ca_ES" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="185b45630404690fa9f0b8e67f4c86536433d821d3a9322f1a520e7e4bed2163" name="myspell-ca_ES_valencia" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="f47a860c29ed7e0c06d5f44339c0f7cfbb9b1a8a5dd1bed3f57a79be3edf8955" name="myspell-ca_FR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="5e7295d7aada4dfa35c37aa3bb704903956a129f59f254e7c87efeb92c9887b6" name="myspell-ca_IT" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="e8760de83dc550c6930ad0db1db01bc84671c353b32786212458f07beffd2d40" name="myspell-cs_CZ" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c6e29e43d4ebe9cdcf33836fbfc096113536f698de8fd803a3b257c49990215f" name="myspell-da_DK" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="872a5547e8674d44384fb5e80ca9a3572827cbe915fd312699869b0cd8cc0cae" name="myspell-de" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="d2a8633738402453a612f5e6efd407f175ecc1d489d6590503952b7eb07c2f4d" name="myspell-de_AT" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="24564341fe8bd20ff7a021a317b626bbb3ff32061f86b555d467014b376bd772" name="myspell-de_CH" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b8fca3ef1a94a14d3de54f619854f43d4e8b1360dddd4f655e4c20aa91c8c21b" name="myspell-de_DE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="2d2e63af9cd473285bde366694cc404ea5d7987cd2e55d1c8a44ec628788a099" name="myspell-dictionaries" arch="aarch64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="078d5cd920f6d5a9fc5e5db204ba108d90e1df431371bbd68f684cd788dff663" name="myspell-dictionaries" arch="i586">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="f31242a1e8d4f203c5b79df078caf528edaf80819db3a2cb1bdf58fe8e8145dc" name="myspell-dictionaries" arch="ppc64le">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="f19712d2186e92d5be7c8832fdeb3dd5480db1147bb99943a62b3a7fe8065a41" name="myspell-dictionaries" arch="s390x">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="445cf0ae4dce21f35b5d2b6cee647291105c7f4cd6203597dcf3a64102663481" name="myspell-dictionaries" arch="src">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a14983f4650f516e1b8b1230c839dc0fd93b80c12bf18398d3765af7d38a9488" name="myspell-dictionaries" arch="x86_64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="5c1af9ca4bbcd77b5d44219c2a2656077ae609b26acfd1157ef23a9074c259b2" name="myspell-el_GR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="d4d8f468048fea8813c39db04d5c582cd3d6a5ffad30b8d63ffdffde28cd673f" name="myspell-en" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c176b5c0b61969e69c3001dfa6a0ae405e8bedfac706cf821ef18fa1d0ee7146" name="myspell-en_AU" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="0c5860622eae90149590555bf6548c9818e6ed71fc60de143316f8b265080752" name="myspell-en_BS" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b59460a928425da0c3483484ec65455cdad5666d9d999aa318a147065ce883cf" name="myspell-en_BZ" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="77cdfc47edf41c42bf1451d4463d36e765991f2c3bb4c010e40575fe459e70a5" name="myspell-en_CA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="60e51662731dfce3987b8ebff0d3711a5620fdc9fe915a36d7653d06056c5b13" name="myspell-en_GB" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="fd8ec7814ff0af9865e7af9f845bea5d5ed7e92e10c4de7f335f06bba547efe5" name="myspell-en_GH" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="15ac7aca6fcb68d9cea0794c2e9052405e479860fb3d7227fb5fe5c039915f79" name="myspell-en_IE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="99a2f6f7e768d7983268f5c642c1882c2508cffcb07334b352554789b9a2d969" name="myspell-en_IN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="71fdf2641e8abb7789d0640ecc5674511fcdfe22b8dbe56398d58054e04902a3" name="myspell-en_JM" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="85d27d24a7f71171ef1ac7f631d715e31078abf4060ca8af58553b78dd7ea510" name="myspell-en_MW" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="6f77a11975d314b01b19775f3c2665abb17c38a4682ace512b0acfffb1de7d3d" name="myspell-en_NA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b152b94400d6d9aa4d428d596b4ab2e1f7848f9e30e30fd914c7ed17f176b03c" name="myspell-en_NZ" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="acfb52f473609dbfc6da4923e5b3183445c69624b686253001c7ca21cf89b569" name="myspell-en_PH" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="f3192c757e090e33fc14e41f017a63234425eeb1fefe7dbb994dd69d29ef04e0" name="myspell-en_TT" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a25c717ea989cdf4c42e5ba001fc8098b8a6450fba43015d6133ec72fa9e4c70" name="myspell-en_US" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="10067cfd61619a391f858bf9c1000c03342a121087a7495f02941c96c31ec882" name="myspell-en_ZA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="67573920064308347b36b776ae94f10011e618a1ffdeed1a4bf7a1de05d13968" name="myspell-en_ZW" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="92be435079f587879512e1ed6168194f15d5db2da1dc0b9e844bf8d26d8445c0" name="myspell-es" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="5287a44fc74f03601f982cb54d7ca8eb28b0c5ba2361be6ac479bf65226dd70b" name="myspell-es_AR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c4ec3130141b9a7b005fb3e43618c7c67bfc52a35f7f1d0197ca763d9c8a5633" name="myspell-es_BO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="f4e13ca3dfc8a5ac3bedb15b4f74d8c98257a6b5ce323b618c980e744d12173f" name="myspell-es_CL" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c9492a769714f99d2b82147c5b32f5d6adc5fc4454b2f689618245cfefdb7240" name="myspell-es_CO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="e256faf7f22cd59273efb593dc5832b6f69e945ea192b88a314ac4f96b64749e" name="myspell-es_CR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="419f0f5524fc357af38eae65cc9416de51db8444e7c52678565606b780961930" name="myspell-es_CU" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="15d00b6959258af1b0fbb335620b837dd85609f962db017efe5f929adbf23dcc" name="myspell-es_DO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="9a04d3ebe4ad143da922dce4a02942f9f30262e0f85dd2529a8e29a7e575c06f" name="myspell-es_EC" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="731f22d06805f1f08cd0828ed862ebda642fef0488b6ef7262dd2c7cfd3f1ea8" name="myspell-es_ES" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="e1f5de5f5784985dd2cdc91171b4a46cac8eb5d58e641eabf9fcebb63d2ceb40" name="myspell-es_GT" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="e6b7dd906d86fb322cb3524e3426069a586a8ab1775bd7d2be48701c7e5d3e5f" name="myspell-es_HN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="008d830226ed33cf5a5a3906ea10d4f8d20849309ec63ed7eaceb3485d5d8231" name="myspell-es_MX" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="744efe80a856ee5bb13be78082608df02d2cd656e3c89643141becc5503a79f5" name="myspell-es_NI" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b2e691fc448851709e0830a17eab7302a89c361f856a0a3dffb5e7fe544f6305" name="myspell-es_PA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="fe1da2538378dec562894d0cac54c5c81d89be6bf2bd1ad42016ca188cbd1f93" name="myspell-es_PE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8ebe8eebbfb1354f998bb8d95137eb900b6e158a38e80a74919032b8f7b2979f" name="myspell-es_PR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="3401da097e8e3a83970ac14d231812e9f879bcac8e436f2039e1f5bd9b4cb7d1" name="myspell-es_PY" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="ea79382eed4654579ddc85e7b04bbd23a87080447f0f64da7dcedb7e9dd0ffb5" name="myspell-es_SV" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="1c3148e92d6b5e1a06987fe84970beaeb813db9638b9036018fea5212805372b" name="myspell-es_UY" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="bc4e42a98f2de8da73a2557a759175a756616ebd55833c37db4e2c910d32fef2" name="myspell-es_VE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b7e02c58187d0348b12c4d66f109e4d600c039891aa83d7c4bf9bde9e380d868" name="myspell-et_EE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c3fd9be5b549ff7324921ad23e40348e6a764a09825e8dd62297dc8ecb7e0563" name="myspell-fr_BE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c24c26897484c37cd7045ab617268454bbdaf6d2ab0f61c8853f481396e67f6c" name="myspell-fr_CA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8a1e5d580633b7683dbb454bfc6e0c5841205c661f8a662f823c1e112faa32ae" name="myspell-fr_CH" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b5122d04b0f5fe854344452774a8b559b3d7deb8b3334fd3d9d76c468368cb9a" name="myspell-fr_FR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c26ec58a1609503304bfd0c34fcac38fe6c4f44770d9cfdec5f601337eb93285" name="myspell-fr_LU" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="4bc9bc1618f4bf9392a84ee35d338738df7cd07ddac0325988ccbd044edf17b2" name="myspell-fr_MC" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="fda5195cd13f8abae553c3ff44cda0d9e063948198605656746e2103a1fcd6d3" name="myspell-gd_GB" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="7a1bcecf099c91f76c39f349d7689335de12edff382c9a76c20ace77e1186af9" name="myspell-gl" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b72023f89e298bb229e955a64282b0cd0a607478da1c8bebee55171f68bbee97" name="myspell-gl_ES" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="12b5a665b565be7a9d0925b52b839964e58e54a15a1e8fd104621d9dbffe60ee" name="myspell-gu_IN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c9229a9c166f392b0d7b28f32000cba5c8194a7aca5cf5d74ead3afb27b8743f" name="myspell-gug" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="c967b051ad9539f4196d1d59915bae6456220913a234a5513725b4800f277769" name="myspell-gug_PY" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="9b94c9b610ac5f7d21526f68f5203b763dfc0499333aa5085eea11a6496d5612" name="myspell-he_IL" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="772cd94f5c6723994db5506c82bcd30e633c3bb22fef3f14c98547c7dde5e6f2" name="myspell-hi_IN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8f8a8e9f261f5ebb6351a5c8e75a80a31d7dc57b5a1ff672becb0bb8ef822759" name="myspell-hr_HR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="ae56669260c1478220c68440042b09a919bfd77a7a319f9b6b04600bcb4a6105" name="myspell-hu_HU" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a9fd2b3edec854afb89520099402fcf4ba1728a3670ffa0b8dd1c3846daf6b44" name="myspell-id" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="28c747d81b9c63b2acb0f5988e269e36358251028b7f4184885b194fb52f35c0" name="myspell-id_ID" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="390b447285ab727ff2155b4d3bd46cc33e767755b079d9fe82353da2f577830f" name="myspell-is" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="52f07b677733eae71a66f257a2c6fd168b661f33cde18f9c6275818b2f0328a1" name="myspell-is_IS" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="5ef32c21f22b4d78e5389376eada05aa4ef4a1c942f7af8bccc28c3c6c07fb18" name="myspell-it_IT" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="9d7986ffc04f1ffce6fd02fa26c53057a3e0ed93b4f1ea0c79f8ff91b413e259" name="myspell-kmr_Latn" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="cd04f6c9f4528756a200c3bfb80aa56b3d92ad614afb15efe968a795226e6617" name="myspell-kmr_Latn_SY" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="3494c03540f48ea995858684512a5826a308c8fd4eddab6e3724e8cf44687fc3" name="myspell-kmr_Latn_TR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="0af4ee4d8ed1d22df29f8a70fb3f4475ac1cbce8e4958a1ad2b02f73442f05fb" name="myspell-lightproof-en" arch="aarch64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b6b46be17863fd93e0286d9fe610c1de25d24f0c1b906198f8b68c0ee4ba4d35" name="myspell-lightproof-en" arch="i586">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a7a8131f1ad61556a8866adbcb9060aafcb98678d026b7ae57d75086f3497e20" name="myspell-lightproof-en" arch="ppc64le">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="4e4f2f3775b081f934dcb08b527bd178286f64e12d61cdcd7056ac8e1473ed1c" name="myspell-lightproof-en" arch="s390x">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a8f55a3c10ce1b2ed4d8543bdfb3ebc0e0f946e2890e0ed3489cadf219fa7a75" name="myspell-lightproof-en" arch="x86_64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="ff8f08ed925a8fccb18ff0e3ffd73272747dc118d76c46f1449b9cbf02eab792" name="myspell-lightproof-hu_HU" arch="aarch64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="3bb49a12eaedf394f143877011648acbce0a9d46ca36fbf8874627bedeab5d6f" name="myspell-lightproof-hu_HU" arch="i586">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="cfa9f7e92f3f464b8dc7ff3c8b1f6689e9e4ddf499488b6ef71eb2706bfca8b9" name="myspell-lightproof-hu_HU" arch="ppc64le">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b86234f33563d5f114c3f5d0146576d7f6e5ba3cedd48193aca3ad12583a9178" name="myspell-lightproof-hu_HU" arch="s390x">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="3bbcf3138f25171d1c7f8ac5d8092fb47ba9834c002e5b50209bef23192ff191" name="myspell-lightproof-hu_HU" arch="x86_64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="7fba89c64fb2bdbca49c30caab2f80dfcd6199ab518ab6526ad187cb4c3f905a" name="myspell-lightproof-pt_BR" arch="aarch64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="2b7b48ece9400ef5143b10f217af4d6e8ae34320664de1e599cfab3e0bc625bf" name="myspell-lightproof-pt_BR" arch="i586">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="35fd36b13d456abd3a302d9b621bfa6e5cd11b488361d6170fb230e92799b9e5" name="myspell-lightproof-pt_BR" arch="ppc64le">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="dded88575bd4fe50d52457ced3b47fbac39440c7dbad0e4cc621395f5d36fb6c" name="myspell-lightproof-pt_BR" arch="s390x">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="21621c7c1c445c14d7b6a12b428776f5ba4ea99a48424f28ab4b02643500fd7a" name="myspell-lightproof-pt_BR" arch="x86_64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="16a75677affde3bd41e52a7e8975bbabb0ffd916f54b33e5ec52dd088886b26d" name="myspell-lightproof-ru_RU" arch="aarch64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="4cd72300f19569182d5be9a12c5eca6810962345f589fb043d6ae2ff04d92bab" name="myspell-lightproof-ru_RU" arch="i586">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8b0895077e1706a54a72c7ed0d5810015dddb619720ab9bc3c61cf8920d1bc79" name="myspell-lightproof-ru_RU" arch="ppc64le">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="82d448450c3af8afbc48b145e1eae3e382d316e9341a34dabd92799a038e922a" name="myspell-lightproof-ru_RU" arch="s390x">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="4d6915057c64f0b8f0fba4f09ce70a17753ef58371f7afb55663e55333c10974" name="myspell-lightproof-ru_RU" arch="x86_64">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="5bd83565cacc8d61da2ee88a73afd5bec9f3f2a6dec9556408e95e238cd5a626" name="myspell-lo_LA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="3834a5e7bdfb9a432b1cf785cfeae5e8c40ac2edf2f21ed7c95e67293edc0b6a" name="myspell-lt_LT" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a82129f7b8ee9d07e477bb0ecb99f758fcc83e7e15c64b9330127c1eb69a3522" name="myspell-lv_LV" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="fa1812b099f7a5d7c418a439307f085ad1b6f4f4b8ce54c400cb8c0af684cbb7" name="myspell-nb_NO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="d15cd579b24f18c1fed4d8967422fc18813475459e6000e25f5ed4b1cd80644f" name="myspell-ne_NP" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="818dfa8ef443ecb04ed10c937db8d1b99fe214831e39b9519d69616050fa0cd4" name="myspell-nl_BE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="61449cb2a63e990f78d88623b57e286e38ad613a84a0f6a8f598bbee8fefa943" name="myspell-nl_NL" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="492b506c7628a767f305c7f9f113f917d9212e8d67ccc1b5adc76133af26b914" name="myspell-nn_NO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="31c6219817cfe79f6d49edc27c74d16dae29859a3bdfe486252e03f99948fe26" name="myspell-no" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="a734ee51cec06cfae29cddaed2823c4c119cecdb9deb0e6ff3aa82d35ea9b63f" name="myspell-oc_FR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="172b3419af070b2800981a72337f2759d298dbcdae00d90de22e3378f6c52aa6" name="myspell-pl_PL" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b5782713207d8f1f4ad16ca75660f3d5b188e77176c977a391fa69fd2a8b7c40" name="myspell-pt_AO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="15c20bf9460b3ed78503928b7fea5463c352b7e9049d600d166ac83197e4b8e3" name="myspell-pt_BR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="715d5d070c95857b211192f9a389f30b3c4dcc9f687a4e665e5e7bd8bd501b64" name="myspell-pt_PT" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="567f1eb4afc0a1c92b2a678342f60eeb2020199682aa6524cfffa95a3c9d75af" name="myspell-ro" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="4886128ef8cb2fa0f2bc22d409d12511c953a9612228ac29e891dc036192ee7d" name="myspell-ro_RO" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8968b50c98ceb2c6170db98c7a3ac6b538da273277da6023742c7d7269979423" name="myspell-ru_RU" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="30991864f2b19401a4b1886a812b6af04d738d803b92ed8663390668b98d32af" name="myspell-si_LK" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="e338f222401eef0971b200bbc2ad769663a63519b834a1de3921237a57f9ebbf" name="myspell-sk_SK" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8fb4d132358c11ec1e35bab3f5824935f89133d664f863ba018faf15c063ab41" name="myspell-sl_SI" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="9ac3a03440428350e4e6f0d7707853e4f5d8e757cce0431be65b5fef9a7223ec" name="myspell-sq_AL" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="19721d357b16d3ba194f8c210544b7851aa423072234f0ede6cc0aa179edf35d" name="myspell-sr" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="504f92a524aa9b36dc80be46feac16553cb1332bf948667a19e4121bb50ef6ad" name="myspell-sr_CS" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="9c07a3e39251e20e91f31d441d6f4e0ed215e7d8604313c5055ff97d0b207425" name="myspell-sr_Latn_CS" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="f5ef9a8b96286d4fc3d5ebca32f4b2d9e743a03245c44b271422ba0f4115e3f9" name="myspell-sr_Latn_RS" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="637b47c21b26f99e6af05e5e11e7645431d0fb95aea59fd0c8e10a4c3a48eb4f" name="myspell-sr_RS" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="29b5198a1cd6a0e8204734611a2961cb29643f29bc0a040af663d03fd9c300c2" name="myspell-sv_FI" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="cd3221c8e8440478779f84405ab93ce7512c98e17205f3fb80465774adf478c9" name="myspell-sv_SE" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="020ae243593f09107418a72982449ba78731a3263aeb7e4049cc725ae4b371de" name="myspell-sw_TZ" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="dcac8834f2826e1646ad9ec096ea62a846a38877739940cb83efb4dcb706fbe6" name="myspell-te" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="ef2d626c55b82393949cd0820dd921b6dc5f80a1e6e321716ace0a24eb3196d2" name="myspell-te_IN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="4a47b71f0dffd0c62c73f84152dddd5d029f36f624d141b53ad0cf2118b59fc1" name="myspell-th_TH" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="01026319ab42effaa7f9b684f0587208e16c7483c4716cc7b844763a986b8fde" name="myspell-tr" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="2f95c1ab704c151960c14d9d432146fc2c6f1f6dc9ff6fb9262e657e3c86723f" name="myspell-tr_TR" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="76998f4cd7a909e7898f579013d9f6ff726f738a440aa16ff61ae6c217875d42" name="myspell-uk_UA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="b1f1c35b70d9acf174e16c7ea417c0aab18b8b6cfa35330cceb2fb2800f85f88" name="myspell-vi" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="15812d98ff4fe7af2a743e7956cbe1a5fdb384ec9ba821cfd25a05015fb98a8b" name="myspell-vi_VN" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="fc2e10b0b13c284e6b95b8da773441250640d655598db3f4b9d389e28ab95f7b" name="myspell-zu_ZA" arch="noarch">
  <version epoch="0" ver="20191219" rel="3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1540468800">- Update to 20181025:
  * Turkish dictionary added
  * Updated French dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Update to 20190423:
  * Serbian dictionary updated
  * Update af_ZA hunspell
  * Update Spanish dictionary
  * Update Slovenian dictionary
  * Update Breton dictionary
  * Update Galician dictionary</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Update to 20191016:
  * Updated Slovenian thesaurus
  * Update the da_DK dictionary
  * Remove abbreviations from Thai hunspell dictionary
  * Updated the English dictionaries: GB
  * Fix logo management for "ca"</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- version update to 20191219
  * Updated the English dictionaries: GB+US+CA+AU
  * tdf#128341 use python3
  * Bring shipped Spanish dictionary up to version 2.5
- modified sources
  % update.sh
    . gd_GB does not have dictionaries in gd_GB/dictionaries
    anymore, thus removing exception
    . check for /usr/bin/th_gen_idx.pl existence sooner
    . no Group: tag</changelog>
</package>
<package pkgid="8106703f1ccb226c827d605a8bd58f08fd8139f7957852a86e330ccbd18994a1" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="2f5348a85b2003b796ff2fa8aa1c1a4596f8d5067452527d08ff779798e4d7d4" name="nfs-client" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="4aa603ce26f456cdb251fd3af81f911d5ec7a011436a18f6c172e10cccf92f67" name="nfs-client" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="596094cb14362e7acd8d03e05d808ea0650dd6ac712e73836f064c37bd4f4318" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="1a38f2615ad823a8dd8ffb1ea375e697be23b940614cd478e03cceabd89790a7" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="bbed3681f5409929ce8babd9e990ea0222b92b78a99385dc4fe8d9ab4fad98c2" name="nfs-doc" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="dd65bde72af31366f2ebf3e1a535b848a87e734cdac1a2d6eaddf306e1eba079" name="nfs-doc" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="2ca06c904b76cacf753bf24d9f43e6408d3f39170c4a8fd3babb2bc9e9a81c36" name="nfs-doc" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="9c74d054a0c16f54abbe0bb7c35922c97a5eec344fae1812bee1a7c3ea7c9156" name="nfs-doc" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="c0a826b29b8f2af5cd8f5c40e1d48066f3a0e5e9931c5602a46d72c0e59f987a" name="nfs-doc" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="ebd36c5200a55084d141ba9f6a8fb6c1c92621fc64de9f2e90f1bc49c9bd0614" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="a95924e3e5d958886fc929c5fa3eee197b1fbb1ca813fca248a07544b2da54e5" name="nfs-kernel-server" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="fefd57c15ad273375cfcbb2f46065e03053f75bb29e68a422647dbe0345efbd2" name="nfs-kernel-server" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="e67f385a196e8cb0ad23863fdb45e09b5facbb7a81f909152eaec876033e0fa1" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="129aaca76445e9c9a6ce3a94055b6075391c250922af949c44123e81a94965a7" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="f179ba57f1e1d3ede654f5db5c21964f0d5b934ca2e881af8a8bbf8f8be038c3" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="47a8ddc7a84dc2e9c2e390de8697d18d2de163a38f3340c255e5b27877ccb10f" name="nginx" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="4ca55d890a745593fd35fd84e1cf2e5bda32eab03a3799498b8f83e9df8dc000" name="nginx" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="af8b62f359dc2b289171dec3e17779244a2d3790f90b951b368ddd03c3a870ed" name="nginx" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="2a46d135309d383f860978f03a4125d812fa8d34a486f672a2e73856f2e7e441" name="nginx" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="4327adc53c7086fc8eb07abaa1cb614602971c6bbf5fd072214fcd59ef31967e" name="nginx" arch="src">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="d92ae9ebc10c7690f69cf4c56eba2aa64a0ebb643fb49130f58e7c2bb3f57073" name="nginx" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="e8aa288a5c37a335d41ff831f759cad281677d9ee6ea4554c5f12cd268240812" name="nginx" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="d8224fc3100b7a1f35f4b532751ceca93c6c7c0bc18dbc4fec2dc0646404544f" name="nginx" arch="i586">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="9cc2fe3b0286092a625aaef00d9c5bed3afb30140487c2cc1ef64a0c460a2443" name="nginx" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="1a9216509e22497b76336d2f1ac01da8a1ffacf269eb388d2cfb4245cd86da44" name="nginx" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="cde0ca2579cb431c5d9d371a332cb07d2a849446fce3cbcd8869903a7924e202" name="nginx" arch="src">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="e0c58640609ad6cbc32efe07c1f5935adeb6e4514a5e3383fe3215dd433e789b" name="nginx" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="e19207ef3b5cf98945544b8fadc4488f4754f171cce1bc06ec2de5021e9b75b4" name="nginx" arch="aarch64">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="43ad465d41057175b92005188493ec75720fa338301ea9b8143b938b3435d42e" name="nginx" arch="i586">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="fd00683d03c02b013a7e6f64522f64ddf85724736f594c24ec118c7cfa484b00" name="nginx" arch="ppc64le">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="c468cd6d1df954c1d91b0467ab2bd5977f5d6dea2f31a0c06e52648fff63ff7c" name="nginx" arch="s390x">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="371c716726c1b2ab1c3acfb209828a5a5e5c1cd97809c3c066f2429ea7825cdb" name="nginx" arch="src">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="8a42ada87e35ebf59ca6dcd1b633b0c8fe95f5f782b915515e0189623a3f4f0e" name="nginx" arch="x86_64">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="f7183a5588ab47c69c1dbdd0b70b71eb4ef3ded8073c8d7baded65fea7d5a3da" name="nginx-source" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="65417d3c141262ce92967b2b11804a7a72a01aa88f3e9d48d730d98f2561366c" name="nginx-source" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="ecdacc02897547e8551490ccd032ac5611202b0cf301febf9c158bacfe8cd81d" name="nginx-source" arch="noarch">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="1e64af5e8dbccf008d83e991e473645f806ded6197355b0a200f820ee4191fbd" name="nss-myhostname" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="47f330eeade7eaf28bd13ad1c60e752f6e1bbba41c5b51404e1ea1590fc5a8fe" name="nss-myhostname" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="9862c4be07110021e707ba46bdf76c27f73f6f63bea09306b321e33a667bf8eb" name="nss-myhostname" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="532add2517bef87d1ee1ebce8ac1b32c4478b10b0ec4994efe95fe470768cd7e" name="nss-myhostname" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="dd530ce4aa79db3686a922ce82cd1a0a67da83080e86ab64de39d55b7175e8ea" name="nss-myhostname" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="35976002c4226af6e49542c78237f2c5086153b62cfbd860eda16658be380669" name="nss-myhostname-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="300dc5436ebbabf9cc3cd5ab94ddd84dba8b25632bfd36b09b7418ac7168aea5" name="nss-myhostname-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ee67895a02bde5d120f556bcb422b7c5c4ea72da1fc939d309f24c35b4840681" name="nss-mymachines" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="38c97ed667f82b06d748a93bc6d911d9058d3581ac3352f9ca73b6c26f427e98" name="nss-mymachines" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="169578a822819b4ce65eba3d2cb6fcc81998ae078446dafeb303dfe870578f84" name="nss-mymachines" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5bb6d83e57f1ff0f41a88985b7327bfa4560010ecae861f675848c6d423630b7" name="nss-mymachines" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="bc7b6270fcefb7412014050fffec7b2679810e2aa33111ff44a39efd1fb29a92" name="nss-mymachines" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f902ef8ba2d8d49aa7aa7050d66b3a59106de547a52e48f0c078040ccc6c88cc" name="nss-mymachines-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="33d8b1f093f929ee222d0b3fc7e51ed5601692b84a2963f76375bf87201e9af7" name="nss-mymachines-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="76a3d6f1206915f8b5c92819bb1e787360ff8c3c09c8cd4c5315046e8929a81a" name="nss-systemd" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="3aaf3a3124c72edb6b24ec62d461886b5d49f91629f8f7d1f207b28e6df0cd95" name="nss-systemd" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="300ebf7da4bc1d8f69136275d843ed935a1416ee04650361cdcedaa52260020b" name="nss-systemd" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="7f39e8ffb400c52cbe7d397b8a6224523c3c050f5b90474fd2a260cf6b4c57c6" name="nss-systemd" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="a9415fe31f84bb20dd41716b79ef90590d34be87aaad6a97ddd37c9dfefdfd6f" name="nss-systemd" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="82d056887c6f568d42973a14f64c7a1c647e9d3f79d07d5b0be0b368e8dc715c" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="fdd0b39d0e9c2515edf0522b2f2b3a90b8f2c80d9fe620f3a826bd8ac37a0eba" name="nvme-cli" arch="i586">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="7a102edfb25a82479d42e6d6640daef69a86f4e3dd77d4934c16cb5d4c869e79" name="nvme-cli" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="9988321be63e9684bc6fe4af78875e07834a5a60577f80016f457e222e8b3b27" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="e120f009ae1ded706358fbbb4b95343f62dc310202f2481f0cc171786d353f23" name="nvme-cli" arch="src">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="38adc59008c55e032befb2943934f1584c742dccd8a80f820e4018b489dd0382" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="48dfbf6db278ba07eb0c5a43b284584c50b63235a0451fbc6dca05e5c3884c48" name="nvme-cli-regress-script" arch="aarch64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="b6bac93ac3603fcceacb5ca23cb8f8529de1d67071e17eca7718692afd5b5dc0" name="nvme-cli-regress-script" arch="i586">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="a2d1c9ca007dadfdff407aa12754e20bdb8a300a5183c9b789a0c6b9a3bf4a3b" name="nvme-cli-regress-script" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="e67cf46dc69418abe0659cce3044bb4a4e354e5364effee808ec0115eef28d0a" name="nvme-cli-regress-script" arch="s390x">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="d9ad5757d017b4e7202647ecdf90edd345470913bfad0c990b9e344a7776fa87" name="nvme-cli-regress-script" arch="x86_64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="fbdfe7decb2fb11f96be08e5400225795c1270d5733b3bb1cdf31d691162226e" name="nvptx-tools" arch="aarch64">
  <version epoch="0" ver="1.0" rel="4.3.2"/>
  <changelog author="rguenther@suse.com" date="1485432000">- Initial version.
- Add nvptx-tools.patch to avoid errors when ptxas is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1486382400">- Package COPYING3.</changelog>
  <changelog author="jengelh@inai.de" date="1486382401">- Update description</changelog>
  <changelog author="rguenther@suse.com" date="1504612800">- Update nvptx-tools.patch to check for getopt to avoid providing
  an incompatible declaration.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591185600">- Enable build on aarch64</changelog>
</package>
<package pkgid="664c831c723bdab1718b05d91825f6bc328b898f0e6167331d16889a3058a670" name="nvptx-tools" arch="src">
  <version epoch="0" ver="1.0" rel="4.3.2"/>
  <changelog author="rguenther@suse.com" date="1485432000">- Initial version.
- Add nvptx-tools.patch to avoid errors when ptxas is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1486382400">- Package COPYING3.</changelog>
  <changelog author="jengelh@inai.de" date="1486382401">- Update description</changelog>
  <changelog author="rguenther@suse.com" date="1504612800">- Update nvptx-tools.patch to check for getopt to avoid providing
  an incompatible declaration.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591185600">- Enable build on aarch64</changelog>
</package>
<package pkgid="00f5c0e787a2f9b3ac91c90283364586752849be6349a169d31c9678b42e18b1" name="nvptx-tools" arch="x86_64">
  <version epoch="0" ver="1.0" rel="4.3.2"/>
  <changelog author="rguenther@suse.com" date="1485432000">- Initial version.
- Add nvptx-tools.patch to avoid errors when ptxas is not available.</changelog>
  <changelog author="rguenther@suse.com" date="1486382400">- Package COPYING3.</changelog>
  <changelog author="jengelh@inai.de" date="1486382401">- Update description</changelog>
  <changelog author="rguenther@suse.com" date="1504612800">- Update nvptx-tools.patch to check for getopt to avoid providing
  an incompatible declaration.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591185600">- Enable build on aarch64</changelog>
</package>
<package pkgid="5c59501377369dd97b79142a318227cd5f145573d05e405ec657df079afeb6cb" name="ocfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f7a38d47df694eaeba193343f22bbfa0886de7c76659078f24f1c6e3df55b513" name="ocfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="8de1b91bc3f405d00bf5ae002377c3d3a0acc9d8ef8195203ce868e0d3b97077" name="ocfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="5eb51da5e99b8af2e47bb2556bdb229b696aa8c29dff49f06c246f0fdafb0ba6" name="ocfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bfccc4e291d44f190a09a9871e666772875079f6d17ec90052d81ce3bf691271" name="ocfs2-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="372c4486fc2a35bfde076f631c277fa45e5033e84377bb23b47606e2b3956570" name="ocfs2-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="801cc6f646b2fbfdd3762eaed83a83a78676b11fbb3c206d99da35426e3e29e2" name="openssh" arch="aarch64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="272cd72b1e7b6261debfa77c051e252db0532ab880817ba06b85e5d2666f23f2" name="openssh" arch="i586">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="14f12dcd0c95e287d03fd15f812d8a7f16ea032c8ce803858fedb7c224f496ad" name="openssh" arch="ppc64le">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="649200a89752c3f76673d847c90416b1255076318e212ad5cf4fd31bd5d0ddc1" name="openssh" arch="s390x">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="5f0e02f37a7a2f4566e3983ba45a27fc377126226944eeb45831c573f6a00b4e" name="openssh" arch="src">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="9bf80747b5d38ae6d42437a867af84d85c66d775b26720ce6bbdfa95a73ee037" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="83a679e2e300bab5684651299f712e3695dabf68319e9b6cfa4fbc8baed5d699" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="9fe2907e17fd192ee9138aa9b9334f933944e7c5d24e30d338f79690ab40c8b3" name="openssh" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="5040820b03dd7fe519c2268fa884c93c41a9eb90eeade64a84d9225c7db3574a" name="openssh" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="fb0d58330818ce87d7e7062de7c2d4cf3816a8fc8ef1c89a7846874313be9c1b" name="openssh" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="f741a456d22e3dcbe5087338521ccb344c85e9075c110a0b1421869a332b616f" name="openssh" arch="src">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="e31a6c264c4e720ff901870b52598c9b5c3de6c5ca6f547a9b695b69c31e991a" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="aee40dad49cdf907a078a5d2e36c612fac6e989ed073c90a00340f993cfee200" name="openssh-askpass-gnome" arch="aarch64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
  <changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
  <changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
  <changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
</package>
<package pkgid="b06ba5721aa64fa4dc6243592fa7f56a857c884c4e9bb8258fd939aef7dfd9b8" name="openssh-askpass-gnome" arch="i586">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
  <changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
  <changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
  <changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
</package>
<package pkgid="244dc324d88fb45e3f9de076b648df57bb5f5625ceb8ef84be87547eb21b1320" name="openssh-askpass-gnome" arch="ppc64le">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
  <changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
  <changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
  <changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
</package>
<package pkgid="430837ecb9af6b79a0d2f331398f5324e0fffb7e82a88cd4dcdcfdd6d392b30f" name="openssh-askpass-gnome" arch="s390x">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
  <changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
  <changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
  <changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
</package>
<package pkgid="b365753fe821982bb41086e74e0516279929c505a87a9e57f031e096e78838a5" name="openssh-askpass-gnome" arch="src">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
  <changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
  <changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
  <changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
</package>
<package pkgid="bed4874e45ca75d08bd3366ea4ee3f80a07adbcd29d2b4b66228ab7efcdf6c03" name="openssh-askpass-gnome" arch="x86_64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
  <changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
  <changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
  <changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
  <changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
</package>
<package pkgid="bb688eb35d6bacfacadba3329ba52e5c4a4679f8cd4d0d8b7990b935bc94d5e7" name="openssh-askpass-gnome" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="ced840d6dc6c88ff2cadbe62ea4a286cd0b6ebf61d8b85476a141a920d279c3b" name="openssh-askpass-gnome" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="e509f1358385a5776a36dfbb0c41e392a3d19fc92d7705bcfbd4f5cf1c2fc496" name="openssh-askpass-gnome" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="9eacc8a49f2367e3b93d4617b165608e76d1678c4ad5dc51b193e5d793a31ffd" name="openssh-askpass-gnome" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="e9c71fc3b4afd18129b41b6398d24ded078122680e7150c83de727a25b2f9dea" name="openssh-askpass-gnome" arch="src">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="555e56dd1adbdff0b772b583980d5bff28e6373c990a7b2ffba60618cb2ecc88" name="openssh-askpass-gnome" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="c0d9da9c419219f7ee1af9eaa41dc8b41bafab541ce0bfba7ff08702e559a8bb" name="openssh-cavs" arch="aarch64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="d5c3ea161f6312edcae600139295ac2e7afe5c8d163ab6dc17527ab8e2da57ec" name="openssh-cavs" arch="i586">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="fe4eedf463dbbbca3dd636b11f14710d5815030d2a8ecbe67913e9d0685a7b61" name="openssh-cavs" arch="ppc64le">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="dea6f00b0b2af8061130e290182bd27ce675b993efc2dfa06583fbf275b33236" name="openssh-cavs" arch="s390x">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="2cf8738b9e7d20e18c67f5aeffb5d326882be5fb4954f1090c1706aa21a38b71" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="834496204f3a231a5c758ef88db61c6e8cf86223951a4b5192c47e0a13f6ae7c" name="openssh-cavs" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="7ec6eb4be31861f1590e952c9d709bd44f7af4eafb1458dbcbf95f3f0438aa83" name="openssh-cavs" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="5236a9ab28efb404dad53673710e51983270f43e8c60af763ab032efc1abd0de" name="openssh-cavs" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="a3d730632f81743a7d3c98b0983b907559fa07fdc31794b752956ba76f2a1540" name="openssh-cavs" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="6cda8094dc51e60bad10a6abdd214df220ad3124ac37445cdd65b2d59bf09714" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="83dc0b85bc873dca4c607542b2db27e48de7354e4c24d9839352a8c3b002de37" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="e07b20e935e350a3f142a1a6dd1c265b7628b59dc332191ee8d73df0d1ce8f5d" name="openssh-fips" arch="i586">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="a2a412333e9ebf5eca0885de32717742a35188e0184695025cf87db82f5c587a" name="openssh-fips" arch="ppc64le">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="e7d3404880d49d16b6e34e8ec494f9bbede663b8381b5a5b6375720ec3cc62be" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="37edd4b4c143c6d6e30b8240f1ad9cfdbf680a83bef2394740da0cde7db3186b" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="6053cded6300486e50da367b2ba81b83f7ff6fc9eaa745c281b3f2c9ca328cfd" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="64c78d5e815c7c532f87127d4dc0d272b65ab4b230d4cf342ca405246f29428b" name="openssh-fips" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="7049bcf4961b7fd32c9176dda75adacc8b7c8f802af7b9ec382dcde0e930ddf3" name="openssh-fips" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="c76fd5ef659a77fad474e00f4d1a5196625e6ecae2acc36dae389b4a64abf641" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="2601b9db818182c7c964f0f382455ce5b6963dea96fa8577a54ba3913b1e886a" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="d1f3e3ed70aae3f486cdf50cea18cab8afed9ab343c33e3d72d613734f2fb18a" name="openssh-helpers" arch="aarch64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="c9c0f0d6e9ec10f882c36213303bc32ad144075b4a428d085de8e6a8e84e999c" name="openssh-helpers" arch="i586">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="3584fc85c64de2556bbe74ec2cb462410e3e8127f02fb6de663adfd9bf4eb19e" name="openssh-helpers" arch="ppc64le">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="391a0210ed85f9252d7381381331d125e5ee3f3e589f0f3fa93ac0b4e7e53e51" name="openssh-helpers" arch="s390x">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="a9239a2fe95041853ae993dfe4107340007fa81befc3c9e8696dfdcee60ba300" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="7.6p1" rel="9.35.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1548849600">- Revert recent patch that introduces regressions [bsc#1123028]
  * Removed openssh-7.6p1-scp-name-validator.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550145600">- Updated security fixes:
  * [bsc#1121816, CVE-2019-6109] Sanitize scp filenames via snmprintf
    and have progressmeter force an update at the beginning and end
    of each transfer. Added patches:
  - openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  - openssh-CVE-2019-6109-force-progressmeter-update.patch
  * [bsc#1121821, CVE-2019-6111] Check in scp client that filenames
    sent during remote-&gt;local directory copies satisfy the wildcard
    specified by the user. Added patch:
  - openssh-CVE-2019-6111-scp-client-wildcard.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1550491200">- Handle brace expansion in scp when checking that filenames sent
  by the server side match what the client requested [bsc#1125687]
  * openssh-7.9p1-brace-expansion.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552219200">- Fix SSHD termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect')
  * [bsc#1115550]
  * openssh-7.6p1-audit_race_condition.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305600">- Fix two race conditions in sshd relating to SIGHUP (bsc#1119183)
  * add 0001-upstream-Fix-two-race-conditions-in-sshd-relating-to.patch</changelog>
  <changelog author="vcizek@suse.com" date="1552305601">- track patches in OBS as we do on all the other codestreams
  instead of packing them in a tarball
- add unpacked patches:
  * openssh-7.6p1-seccomp_getuid.patch
  * openssh-7.6p1-X11_trusted_forwarding.patch
  * openssh-7.6p1-cavstest-kdf.patch
  * openssh-7.6p1-sftp_print_diagnostic_messages.patch
  * openssh-7.6p1-fips_checks.patch
  * openssh-7.6p1-systemd-notify.patch
  * openssh-7.6p1-openssl_1.1.0.patch
  * openssh-7.6p1-X_forward_with_disabled_ipv6.patch
  * openssh-7.6p1-ldap.patch
  * openssh-7.6p1-audit.patch
  * openssh-7.6p1-send_locale.patch
  * openssh-7.6p1-seed-prng.patch
  * openssh-CVE-2019-6109-force-progressmeter-update.patch
  * openssh-CVE-2019-6109-sanitize-scp-filenames.patch
  * openssh-CVE-2019-6111-scp-client-wildcard.patch
  * openssh-7.6p1-enable_PAM_by_default.patch
  * openssh-7.6p1-pts_names_formatting.patch
  * openssh-7.6p1-sftp-client-return-code.patch
  * openssh-7.9p1-brace-expansion.patch
  * openssh-7.6p1-eal3.patch
  * openssh-7.6p1-no_fork-no_pid_file.patch
  * openssh-7.6p1-CVE-2018-15473.patch
  * openssh-7.6p1-seccomp_geteuid.patch
  * openssh-7.6p1-seccomp_ipc_flock.patch
  * openssh-7.6p1-remove_xauth_cookies_on_exit.patch
  * openssh-7.6p1-cavstest-ctr.patch
  * openssh-7.6p1-gssapi_key_exchange.patch
  * openssh-7.6p1-seccomp_stat.patch
  * openssh-7.6p1-missing_headers.patch
  * openssh-7.6p1-blocksigalrm.patch
  * openssh-7.6p1-IPv6_X_forwarding.patch
  * openssh-7.6p1-sftp_force_permissions.patch
  * openssh-7.6p1-hostname_changes_when_forwarding_X.patch
  * openssh-7.6p1-allow_root_password_login.patch
  * openssh-7.6p1-fips.patch
  * openssh-7.6p1-lastlog.patch
  * openssh-7.6p1-seccomp_ioctl_s390_EP11.patch
  * openssh-7.6p1-disable_openssl_abi_check.patch
  * openssh-7.6p1-pam_check_locks.patch
  * openssh-7.9p1-CVE-2018-20685.patch
  * openssh-7.6p1-host_ident.patch
- drop openssh-7.6p1-SUSE_patches.tar.gz</changelog>
  <changelog author="vcizek@suse.com" date="1552305602">- Remove the "KexDHMin" config keyword (bsc#1127180)
  It used to allow lowering of the minimal allowed DH group size,
  which was increased to 2048 by upstream in the light of the Logjam
  attack. However, the code was broken since the upgrade to 7.6p1.
  It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1
  key exchange method when working with legacy systems.
- drop openssh-7.6p1-disable_short_DH_parameters.patch
- updated patches:
  openssh-7.6p1-fips.patch
  openssh-7.6p1-fips_checks.patch
  openssh-7.6p1-gssapi_key_exchange.patch</changelog>
  <changelog author="vcizek@suse.com" date="1553774400">- Fix a double free() in the KDF CAVS testing tool (bsc#1065237)
  * modify openssh-7.6p1-cavstest-kdf.patch</changelog>
  <changelog author="hpj@suse.com" date="1582545600">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
</package>
<package pkgid="195ad99a6aea5065e8046526b2553158af65cc661fd05148ac2338d3b685f231" name="openssh-helpers" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="883d8278f94e7e926ca41ef725c3bc4d0a65430fa17362bbd2cd76313c515950" name="openssh-helpers" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="df070a9f49683e769062f067acced5eb5ad4ce85b9cdf5f79617ee4e9499077f" name="openssh-helpers" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="b5e1fa129b7bc34f1ef2e72a9edf02458f82a5d4e0aee2e9ce5783f44e63f0f5" name="openssh-helpers" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="7c54da011e1899671007d71543a25fdc16719dfbe6551ec66810a5cb79cc9d82" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="b219a7a5a5fccfc685bb98d748b3073db108de0b4b16e47b7407dbc4a05d3bac" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="c5852a1dd66f857653bd18b5c22f6b7aa38b47eb5b0d208b081188b83dd5822c" name="openssl-1_1" arch="i586">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="1ffa0f3833d958771604c7c0a92078fed0da3068f5c21b06057a43f6c08f5500" name="openssl-1_1" arch="ppc64le">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="a67cb4165dc507866e0284a2458ae5b2435ade78fad498910d9756c40fc7da64" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="f7433ce58577c2cbde2b24ad588f3028b5df0883593c4db5be50035c83902856" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="b32c3ca7c4f804dc89b30e889b79dce2e5880718d2d96691f920495a9c372eca" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="deb3f07f4d20f6083c3e1792aa34241f94b542f6f9abf1a343e9d5d95721735d" name="openssl-1_1-doc" arch="noarch">
  <version epoch="0" ver="1.1.0i" rel="4.51.1"/>
  <changelog author="vcizek@suse.com" date="1578398400">- Restore the EVP_PBE_scrypt() behavior from before the KDF patch
  by treating salt=NULL as salt="" (bsc#1160158)
  * modify openssl-jsc-SLE-8789-backport_KDF.patch</changelog>
  <changelog author="vcizek@suse.com" date="1578398401">- Obsolete libopenssl-1_0_0-hmac for a clean upgrade from SLE-12
  (bsc#1158499)</changelog>
  <changelog author="vcizek@suse.com" date="1579262400">- Fix FIPS DRBG without derivation function (bsc#1161198)
  - add openssl-fips-drbg_derfunc.patch
- Allow md5_sha1 in FIPS mode to enable TLS 1.0 (bsc#1161203)
  * add openssl-fips_allow_md5_sha1_for_tls1.0.patch</changelog>
  <changelog author="vcizek@suse.com" date="1581595200">- Fix wrong return values of FIPS DSA and ECDH selftests (bsc#1163569)
  * add openssl-fips_fix_selftests_return_value.patch</changelog>
  <changelog author="vcizek@suse.com" date="1583150400">- Fix deadlock in FIPS rand code (bsc#1165281)
  * add openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Fix the sequence of locking operations in FIPS mode [bsc#1165534]
  * Add openssl-fipslocking.patch</changelog>
  <changelog author="vcizek@suse.com" date="1584532800">- Fix locking issue uncovered by python testsuite (bsc#1166848)
  * update openssl-fipslocking.patch and merge it with
    openssl-fips_fix_deadlock.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1598529600">- Include ECDH/DH Requirements from SP800-56Arev3 [bsc#1175847]
- Add patches:
  * openssl-DH.patch
  * openssl-kdf-selftest.patch
  * openssl-kdf-tls-selftest.patch
  * openssl-kdf-ssh-selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1599566400">- Add shared secret KAT to FIPS DH selftest [bsc#1175847]
  * add openssl-fips-DH_selftest_shared_secret_KAT.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1602158400">- Restore private key check in EC_KEY_check_key [bsc#1177479]
  * Update openssl-DH.patch</changelog>
</package>
<package pkgid="ab7c154a6667745539f947ccf8dd0d17d1ec6017d9eb7c6bbeca4cccf980c610" name="osasnmpd" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="d9a15baf5dd503d57303bf6d64f223a2a93da15848ae51c6a8aa3668425d3c6c" name="pacemaker" arch="aarch64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="489212a87e80ec38c93f2c9d26a32b3c8082376a6960527767ba74e07e937ddd" name="pacemaker" arch="i586">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="c3ed84362385f6caf827f95fc55c7ddc48142d0f6587c45ef5d7c85fde2c71df" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="a9f359c0eb90ecb744b2d50f28e110463a8fe193dc7ddce5b80aefee363a0633" name="pacemaker" arch="s390x">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="a9334070996a007c89ad5f3235823065b9630b150dd37b24f001a2bb92056099" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="f30805ca6d02cb8fda1993eb6fec45f1b93a13de3b8b044b6e82a58ce09ae948" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="0e6e33741593a7b6f330331b511b410d4eba5e2b72949f3977c17df600f6cef8" name="pacemaker" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="78e6231fd9d4d1bb62c5fe80724b88af465f47a1b372fe268c108718c5390ea8" name="pacemaker" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="db47f177b4b6e26b6cac78573cf3e3a3ee963a3f6d82f953fd6bc321ff7fd508" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c6c285521404b2f634fd89252cb50edf290f535e0d2d7fbad4bfbebf8f9f5b87" name="pacemaker" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="313b2727e081cc796158232db308366abf924d5e6985b14a030f8514400b1ec0" name="pacemaker" arch="src">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d55a1f4744035993399c108aa9df87e921698bb6744f92d0ef66a93529c78aad" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="343355ec77d40a16267c4290c83fb3735caa377545066e905f85586ecaa2f555" name="pacemaker" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2630fe4fd9ecd7a688a4dbf5d66bdcf2e7667aa652b7e8f6e42db470b024ef87" name="pacemaker" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="8de906e2d30489230c5977079dd4601706fc5101ad142ee0e1e64563251d6b63" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="683ce036a1341d97f611288d21df611d154b05ffb25e47873c9c6c9938ce3682" name="pacemaker" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="f98ce9f3a353cd17f6e90a4eeced762c355e06daada75ff1c5544d77796ec7cf" name="pacemaker" arch="src">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="56678ae66279ef1997a04cee493730c3b37dd417f804d1a73814bd8250ba7fce" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e37841c810d90e0f943f3dca6000b2b7f1612a458f735d79ebe00f7876e954b8" name="pacemaker" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="71d89a66bd4b494aa4a34f98ee7c2bd07adef4f1c690d955aee8558d0aefe78d" name="pacemaker" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9acade9490c1574f445e72b8f6901dc5520f494b719f30438578ae24e71fc67d" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="38be18d4a53ce4ba56caf1854ab521bb4b17d4c4f4e6f6379d3a76130eff0cd7" name="pacemaker" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e0145cf2abbbe5a113745e1c018822f816c7e2042b42074c2f7d279a79cb63ea" name="pacemaker" arch="src">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="97abbe50e192436d0dfe3d31560aaa926d659cc0c7088c3c26a284f09a8decbc" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b2e1d0fc73d720c78266772b47604635a0a26d99087e6edc7826b5f638e2da9f" name="pacemaker-cli" arch="aarch64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="2f0e6ab840caca1d3264f0c1f330c6bffb3285790b6e854d76aa4205ff648c88" name="pacemaker-cli" arch="i586">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="695f000c5d7344beddbbaf5a73854aa4d7531cbfd45281ac02080bf19f5c76dd" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="42c31e08402963dff2ffd6cf1c19d15f4e533cc832d3d84d077e810d34b6822e" name="pacemaker-cli" arch="s390x">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="88a562af249fa30c71454ca710eafcf63791f9bf64b2d5d110f7ac07b09912a6" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="3907e657b35d2330bd1985248f8f8ca1b32f301fb90fac365f5b2f46b0ed7bf7" name="pacemaker-cli" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="09772b870e01d881274f611b87ce604b403cb0652542459a0fa6c83f6a77beb9" name="pacemaker-cli" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="ac9586bc1fc664f4df4daa6a227c0787d6ded1da54dd50590ab226fe29c0b448" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="30f5b48e24bf86a04c61626931482fcfc742554f7b38a405591559d1b6977f2e" name="pacemaker-cli" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9099c24dd150a71a49c3cb6d8c2800957958c41c192db7a59e076dae720341a7" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b5cb719b351d2456cfa4d33ebdd608dfb98d6fac51656b1672fb5f4abc926516" name="pacemaker-cli" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d2ba51af301f5516d9e088bc2a244114c25a2875534de15e2098099e1def39aa" name="pacemaker-cli" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2d1a057591837af282294ab577a5438fe6f60642ce15d44ec97aad2b403cc7f4" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="6a37848c33e912b468f9cbbb7046df658d44af52ad5f2a9d689637e3f14e16f7" name="pacemaker-cli" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="fa5b049ed64d4a8a2f8ed24482ffb6c497f4b0cf64b358f5b323ebf2710baa88" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="50e1fc92c59c0adcfcd77e1c309a612b117a4fbc17a0f076946c0dc6cf1f495a" name="pacemaker-cli" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="a350a5a91202ea2d1c5df21098feec88b7d3d69aa367c33a5bc6d68bdd8b97b8" name="pacemaker-cli" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="93bb0253975560bbe3c3fc4e1379d04095edfaa8ba894c0d09aa86a7b8ed941e" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c375b41370d838971d09bc42a177c47e59c09e50034cf151d57e495c3ca37b7c" name="pacemaker-cli" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c10ac2ff367744042aa92c9a04c621c64bfd6e43c9d353162018db7677fe3a50" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="62a40bb6c8eee3136d2a51ccb97b29f2840e3a633d2558b92620c1f5ed6d6b6a" name="pacemaker-cts" arch="noarch">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="63d72ecbaad98b53e9cec496c13937d1e865898ce16613fa12b31334988da2ad" name="pacemaker-cts" arch="noarch">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c885fc4aa89a572bd58f33af96255f4e2655f6315cea07d42298bb3e4d6d0adc" name="pacemaker-cts" arch="noarch">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="5d9391e02fbb3f1608667b5a67c74333d7b6f496dc84e861d39755d3fe6a5b85" name="pacemaker-cts" arch="noarch">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9c3218b3c17f9ae02105e1c65a93ae4e82cea38eb586b7e6eb68ca9a3252733d" name="pacemaker-remote" arch="aarch64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="6e6d37e992e47b2d891ae1f23759df96c34e894b1fd06b478ebe4c69a61def13" name="pacemaker-remote" arch="i586">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="0d7a37461b8e5f8c9cd66ea517945d727eb6d3dc32037f21a1925f683ab6e428" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="cfea21252aaaa6b16626d96173b3b0c8da72662b7417aee26823dd6f646c98a1" name="pacemaker-remote" arch="s390x">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="907b91e8973d84d5b49d27b28b4178929179fd3f335ea85ef361eaf3c6eb8073" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.18+20180430.b12c320f5" rel="3.27.1"/>
  <changelog author="ygao@suse.com" date="1588939200">- Pacemaker Explained: update the default value and the description of `pcmk_host_argument` (bsc#1171372)
  * bsc#1171372-0007-Doc-Pacemaker-Explained-update-the-default-value-and.patch
- fencer: add `port` or `plug` parameter according to metadata for RHCS-style fence-agents (bsc#1171372)
  * bsc#1171372-0006-Fix-fencer-add-port-or-plug-parameter-according-to-m.patch
- libstonithd: add function to check supported parameters according to the metadata of a fence agent (bsc#1171372)
  * bsc#1171372-0005-Refactor-libstonithd-add-function-to-check-supported.patch</changelog>
  <changelog author="ygao@suse.com" date="1589198400">- fencer: avoid possible use-of-NULL when parsing metadata (bsc#1171372)
  * bsc#1171372-0011-Fix-fencer-avoid-possible-use-of-NULL-when-parsing-m.patch
- libstonithd: make the assert message from stonith__device_parameter_flags() more clear (bsc#1171372)
  * bsc#1171372-0010-Refactor-libstonithd-make-the-assert-message-from-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1589976000">- move bcond_with/without up front for e.g. pcmk_release</changelog>
  <changelog author="ygao@suse.com" date="1591099200">- rpm: put user-configurable items at top of spec</changelog>
  <changelog author="ygao@suse.com" date="1592481600">- rpm: add spec option for enabling CIB secrets</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="ygao@suse.com" date="1594209600">- attrd: handle shutdown more cleanly (bsc#1173668)
  * bsc#1173668-0001-Low-attrd-handle-shutdown-more-cleanly.patch</changelog>
  <changelog author="ygao@suse.com" date="1597233600">- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)</changelog>
  <changelog author="ygao@suse.com" date="1599566400">- extra: quote shell variables in agent code where appropriate (bsc#1175557)
  * bsc#1175557-0002-Low-extra-quote-shell-variables-in-agent-code-where-.patch
- resources: use ocf_is_true in SysInfo
  * bsc#1175557-0001-Low-resources-use-ocf_is_true-in-SysInfo.patch</changelog>
  <changelog author="ygao@suse.com" date="1603195200">- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
  * bsc#1177916-CVE-2020-25654_pacemaker.patch</changelog>
</package>
<package pkgid="e022af0907344387edc0ec3e1529db3e04e359f79dcdaee71dd8ce23145aa74f" name="pacemaker-remote" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="406ad9856d9ec64a2aecbc749c25e3516c5eb2cfebdf3cb4111e14909f2452cf" name="pacemaker-remote" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="59f42761689a2dece663bb11d24075dc4617b2dad59667733f3d90e406b80d5e" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="5868256f521ed11db5b462b80b5b2871dfd728650674377564eb5ff871ff696f" name="pacemaker-remote" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c4a3b726bf6fd2f013f3ab9d77bf713443657e8b9b8bb35a4fa3377e46c6a321" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="a2c177767f906c7cdc3c198fb37a8dbb9b4877682a0ab95031f203ee4423c957" name="pacemaker-remote" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="4b784388b0ece897739fe750f0f9c5011c5fb22e08ce8f1c07dde81682dbaddd" name="pacemaker-remote" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="1559c2c0e7dbd11201e18ec529e30e8129f4f550825414b4dffc86149f3c0a70" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e63f4d07f2caa2bd67abe6a018d54f157ff5aca038a88ea85abdf267b08486e2" name="pacemaker-remote" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="f66d1af411c9a7087715e07b5bf669973e58eb21d7692533301b5ab4080a4cf0" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="53085b77d5f0b11878692da7f0811df1ec3d19408bbc22d5e039e255378fc977" name="pacemaker-remote" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c60dc86a03308953d7ffb88d0cc67e29815546fe1ec11f981edd1920c1d42799" name="pacemaker-remote" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d84025a454d25298bf28b7aff706e4b959fda9119667bb796d956baf30ca3f51" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2507616678412142e4c8e27c5e443d21c756a8b1b7b12632227aa5cfc080e4a8" name="pacemaker-remote" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="4f4b6068c0ceddb3a89dbc97f00a9d2cf35fcfac02eb7cf37a8ce220a9f94bb8" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b8effab7fb52ca775238ae75ceb36150ce6c3e47c137dcf5cbac2b01d47bd042" name="perl-Net-Libproxy" arch="aarch64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="5ff47ab0946abc67408b4d7ae48fa8cef884aa7ed325e6401b8799da8210e196" name="perl-Net-Libproxy" arch="i586">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="82bd4dcc34953fa655c7595c4a63c21425c33371f0129adbb7bda4ce90f8decd" name="perl-Net-Libproxy" arch="ppc64le">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="c1f3ec1a1ed18c2e0b212a92d1a73f477995b53373a2ca0c3fcc0162f58b132d" name="perl-Net-Libproxy" arch="s390x">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="539a0ad46e72ed6a1a0bcb463e170474d799a21e7e85fe149fd7182ffe31f791" name="perl-Net-Libproxy" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="af524bacf32fce137033a011e5bbf047e3ac87119a8347bc8e4f9ae55aafaa2e" name="perl-PerlMagick" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="1f5ae130b81b473432ae1327c041043ded9150869952154c3f4ffd4d06db83b3" name="perl-PerlMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="df150236a7ff6165d36f4539cb5eb9e7d3fa7c1e8f9f1d7f558109225bf6b7b1" name="perl-PerlMagick" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="5f0052a26d00a9bcf9226960a7ed913a9fe717488fc49be7a180796afd23c0f2" name="perl-PerlMagick" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="a83e99c4f780cebb41fd89613c9dbf22f8b21de2df2e7c3c65cae846901f393c" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="3.85.1"/>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="65c4cecf4463f6a77a111497d10f3d843e29ed5b93579487db31e6ff93940d50" name="perl-slurm" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dd75216a7a310a7881b0fbb26cb41c5d19a36b021e8f3838bd9a9a74531a327d" name="perl-slurm" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d6273a423f05167d1c43a9fa22ed22da369347f30ca1db1537a84b549a410514" name="perl-slurm" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bf0373a867ed717c43c814b49ebaf2ae80571fe06caaa91179da148b15b5bc66" name="perl-slurm" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3c1bab2eb61897c2d6ed8b5ea42712797171789efa4e2658be3b080382aa6b9e" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="33a886bf2649308f9279b96b1a95eaa310896d2621cf5497bf656f9b1de8439a" name="perl-slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="21d1cb2828851cf2c4d85efbd15b1fe1ded41b2df031914e6b1ab17708e99a42" name="perl-slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="907e752f67a8858098bc7c5c35c0899e9a49b5a78cf0f7b0c4c3269f4fe30a2b" name="perl-slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a04b816ff7e3ce60c7280d494f96f786ef62d35286a5f1afc98a2fc37e92deb1" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6958df2584c3ab07a40042c0ddf95c3e97c0bc6c8f615817d900b650b8b6f377" name="perl-slurm_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="608229072093de6ac8d2a5a97e55fce907cee70e77b2e80a7be241c7e709edfe" name="perl-slurm_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c6d064ddcad437de94870a2dc0d298fdd0dd743335c183742256d5fd6e19b6a3" name="perl-slurm_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="33e5b470bf619e5b47426e59d8fca8494e1490d9509a55c67c72bb92d1de68f2" name="perl-slurm_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7ea74dabe6b9dc7a9be168e020d7ff0a6b59611c5ef24822111ac47073c5f26f" name="perl-slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c4886d64e440cfd2c94e87cc82b0d6ae27e450db7c3636a42627f0c1feb90243" name="perl-slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2c7ab7210678f187823dd88bb1da8418a4c0c7c4a3dcf2ac6eb82282ec39aa44" name="perl-slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8b4cb890d00dcd31f62c593063b51809676c2efaa26d7ef1be80eeb90f427c80" name="perl-slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a5d2e3da1156de17f926ce33ec9660c1bceba8530d90ab5b4207cb165aeba771" name="perl-slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="12b5459b78f6f63670772bc499e8d800e675cc03cb8d986ab14a383903ecc1d5" name="perl-slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="9fad8a9a8008bfa84677c70e2556dc0781721deb6829900be4f37742160797f2" name="perl-slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="e3e8c16771d74cd2216dc4decacd65485bcc26e8dc12bd838387f9589a306af4" name="perl-slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="9df1a3f16d365a4d0c6d83ea1246ccf8c6b0c803ee86d0e77dda86475579c189" name="php7" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="7a754d41f9bfea87119e7e6090ed827fbd385345b95855fb8066a85ac689ad8f" name="php7" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6b6cfb63a652d444fc02ad5f3b4d984f4125fd875b86feb8fb57490457b8ffb2" name="php7" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="82341a6dec0ec525b9d50c52ed71ef2c217a6cac9371d504e0c63490f0ed91d9" name="php7" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ca290cc969f1eade0c98c86c75122be37cdddb42c1cd5116e41fccb79575ca0c" name="php7" arch="src">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0223a075cac4f7c1ca75aa93caa133ce37cc6fd5b1a50dd5a87e0587eb82375b" name="php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8c799743245b56a1408ac7e4d289134a799a54e35b1ca2816e298059cabe4379" name="php7-bcmath" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8d5cbf0c8b9771a1f22bb986c71bc5f3cc9cba2afeb1d5388260c835ef6a5d06" name="php7-bcmath" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="55361a90362ae28a80200c59839236b2d370fa39c7b3b6dcfb801d6bd2418bc0" name="php7-bcmath" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="7d086b22c08aa124d8354b9c5b877a47a43fb5c8508b0c90139a44fb65a2137d" name="php7-bcmath" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ed82183e19ff192c2b17d3a8629cb94a01572de2bc240fda788a5f2284575e53" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a201495790199c68a8a30401daa4707bf9af52fd3b6311b643fb8ad68cb24019" name="php7-bz2" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="227bc0b204df66a577f4f2214e24acee1433cdd147a03f1ce9ffcc2e5c6fc3c0" name="php7-bz2" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="9acb54d27ab4ab0f300911a1b515aa221ef44138d486c27d16b5a9a31983493c" name="php7-bz2" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="be99b67b56fcd112fed7213f43e76065e2b581597e8ab1cc9ee5a36fae7d9fa2" name="php7-bz2" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6adbfe23bc377ec47a4eeca8a393759b357a25b531faffe9ae5c2f585ebcc46c" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="45635a1a5d8f92f69087d4bb628374b0c0c9bb536e0c0116a3e3445dbc34f4fb" name="php7-calendar" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="cdaac8e0a6e3c8b7ddcceaafd812271f78a3c39c12bc19537d3675126efbf8c8" name="php7-calendar" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2a3722879a4c309b7a21644f278758c66d7d0b52672bd122f6d9ed8e0fe80366" name="php7-calendar" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="df63bc95aaae9fb26cfc8cc4ab198fd38959fda857bf328a3495af4f86f44c1d" name="php7-calendar" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d4909cae198a35a3617e3e6d8e71575ce24061566c268c4dc0459ccb09669445" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="fe1b6a69195e5edf9100aba64e9935e9aaea339b325d6619e27cb4e201cfa42c" name="php7-ctype" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="08e73cfe581e2c83373826f258f27294f01ecf849e759f0939ec7379a7e03fbb" name="php7-ctype" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="7be09b9ba36560b91c87d663ffa733d30999fe225d90b3d55901eab726ba8cea" name="php7-ctype" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="83d8c7eea284107a4b459ab24f9eb0a5bded861bf25f23a67fe63fde9880b4fa" name="php7-ctype" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e2627e561c4e8ae30e544a887e3f1cf05afe3dbb9fc3073de1d62b7274a634ce" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="bad482464f6452ef8fc3a2cee4062edc398c1a25b724bb03ea1ff24cb6a2768d" name="php7-curl" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1e88a9f9058121fcf4b6c84310a41541e737a261264007d36f7037ef6372b9bc" name="php7-curl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="05457b0655e39f35065766858afb9078b4a44101b4ec9474ca08de293b96d4a2" name="php7-curl" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ac0ae9811827b3d78b5b214bf5fd986f49b766650f4eacd3ff20c545d3137aa7" name="php7-curl" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0bff19334e77f52360eea8818f062a15f2ed6c1d2f1e6404a0e28792bfd3625a" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b7f27fd4b18a52d2cdcfdac327e35e74d5b84632e603aa07d5fcf7cabdec76da" name="php7-dba" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="619fe70d0c4cf8a093be62e0c1cb0afc7a4f6edb0c563ac1a19f2dfa7dc8e36a" name="php7-dba" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="43e207949ed7f1ec7b65baa7cf0f07ea7a447dca781b7aec5016eb1e50b51508" name="php7-dba" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="361dce71e2d1998a5f586eed86cbb3a9f1597ed673ceb91704a5148d30e8329f" name="php7-dba" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="4f45229f470d8bd1e64f3d1be710aef3fc3c21bddc7cde2860ece8a22b8c971f" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2d60ca85ba66e4fa7b15bac62cda98e85023abf9d7769f63f73f16af735a8974" name="php7-devel" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b2d863454463fb6857b46f095b5ae03389d427cbd98ff8adef01f58497e39bd0" name="php7-devel" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3a03320b19506cc9dba4942a04046a968a9f58cfd78f17f295b7a3d64ebcc4d3" name="php7-devel" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="72ad5e40251ec68f9f96181e36b2665907808e25dcf283410db9f14e581ae3b3" name="php7-devel" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="312d2ac2473384214c6cc54ba5470311e0040a788482eddef5a19914f1ba67e1" name="php7-devel" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ede1f61cc86224530a0f0402cefec2a4f4acc9bb72b113852dec4178326faba8" name="php7-dom" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d92a5b00948aa6dbed9d8d16c054e83f42da2947f46b54b350c899bb49c3b1d7" name="php7-dom" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1496ad76bd2215d59a26e64e9cd2fb162662017473569ecdfdb9b5b91d8bee5c" name="php7-dom" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1fed3bff9e404a43680c40e307c66d3375c716a011eb6e854f5b07f5b60dfe8c" name="php7-dom" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8cd09647fefbcea83091868679c2c81543395b6050aa78a56f77f20505b49e30" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="034880b187b31043060cf00ecc1b3d2beb8f6bfaababe9d29ad379c82af728c2" name="php7-embed" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b4c405c3ea3a5db45ae33d18e0fb5b2686eccbf4044ef49b4e592eafdd5406a1" name="php7-embed" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="7c549b38f3eaf91931feef7919fb57da245c8563ff9e11d526dd4d84addb085f" name="php7-embed" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="63ca95f85503802466c9495f7b9199f7a8194e813d309b6ada1686d37c628c40" name="php7-embed" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3fd641063f2464679a57e5d295a6d675183770a9f1a7e77b3fae38af6e3b5d87" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="9f29acca6bafeda6ec43419440f70d25ace6102936e224324b3424c997689d82" name="php7-enchant" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a6afd9749d4b34088692f4e7480e88f6c69a35efa260ec9c63fd812247888757" name="php7-enchant" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="66d9dab3383df7f7d620d2caef43a76bf7f56dd2ee8024c4d6046650d8859d25" name="php7-enchant" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3793720b8d8893a0a8af878464682edd43e6a2ff6d5db308e8c6c27386df41ce" name="php7-enchant" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="019d09bc195eaa31d66bcd9705d41fb1a797c98f4db99fa2f61a6a65e650f85e" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="466a95a470f1e55c314aa0f7587c40a5d69fe22d60f462543b515a3150b2b27b" name="php7-exif" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="cc40779c379ca1a36a5e5b5dda8fa5553eb6803a1884dabc607ab517423723a2" name="php7-exif" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="226c881d4a93cc2b9fa89f2d26d789523d1818c7256d94eaa4e77540340dc7cc" name="php7-exif" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ad62404a5d94d723d7cf5f47eae95553f4fceb3ffb6c5dc9ebbe622823975d76" name="php7-exif" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="35dd20b4bf5ad1278191bed6f1d064f2442ad6e0081209b122be294c11be8f8a" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c09cd0e7e31f7284ec3474255c7b822aed2fc78e5bf32a5eb46922d573781486" name="php7-fastcgi" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1b792df0981eba1c4b1462435b8f7a105a41751311e6119d1961b337c893fe99" name="php7-fastcgi" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="921dc58382be165c1dfc1feacf5964447e7119af1b1c8a1e537314b69aa29af3" name="php7-fastcgi" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ce81a8779b0c6415b701d0747404f7f528f38879b80bd43f457c1e57cc2c89bd" name="php7-fastcgi" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c3127455c7a216fa57d5752d7b888916288c02af333db97a9a76ef5484fd79e2" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="48d110f4dc23c9ca4e6036525eacf4acdbc9c0eab816b579ffea43d73f9e577a" name="php7-fileinfo" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0d7ed793d8cf3304fd9ea507dda4eec62ad11076fcc6ca1498c1588a9de9772a" name="php7-fileinfo" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5688dd98c6e86b94df98eb4659461655feba6c0dc715b62afae749260c0fd78a" name="php7-fileinfo" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="599d696337042c5a473fd2698b9bf3dd75b17d62e1887be4959fb5fd6dd48112" name="php7-fileinfo" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5dcef86437f85400a8d8d06072dad37417749468a8081e041d6d44aca334c772" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2f0cc8c3c0a0c8959cec3599188eede36ac414cff297532a766526cee2f0611c" name="php7-fpm" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a3024ea30e6171089db16ebb2022c9356d1a5d880cd641dce0745b48b30eec8b" name="php7-fpm" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="56304754d322bf29e4de338394952e1c3dfbb3b340b8492be3708825d8ecce95" name="php7-fpm" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="921ebf53dfa0750c24ee4aa2c44fb6b266f9a709bf819e63bd34e8eb2130137b" name="php7-fpm" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f3bd2522aaf9e025a316c851ef0a3db0c4e47cbb4183167574059c9bd932a13e" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2fdd8d627d35154004cb7a99af881870d995b08daa5389e25e3c0b747fe300bc" name="php7-ftp" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="77b6cf26a0e9354f55ec712220c1b191602d74bd7c1611a8e7a531d8c6210883" name="php7-ftp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="488fb5971e12c6e3e87847b3d52a34c772736139d494423a851b228bd8651c5d" name="php7-ftp" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e69dfc43de75f473ec1fcdb64721037c6b2fe92564b35cfdaa5b7b7eb2663f0d" name="php7-ftp" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d626e70da4b4e518441e8caad0c044a9837da3bd7c0074e53ce0b593c3ba171d" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="cbcd23a364b59648bb0adf9f238c871686b7c4461b92132cf8acd775021823c1" name="php7-gd" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6149d45b5e8d52bd1dd9d72d2d519bca876f647f7773e38965dc73bc9ae0d3a7" name="php7-gd" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2bfc39d8bf2a2b2031fbd044973c774724f0be8c69ce8eaed6a19decce2a4481" name="php7-gd" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="39fb7ac48beae2354f3c15b47ca18303f57c202a58e9de45ee58eb3c40c74238" name="php7-gd" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="245364cf38e2cbaa177365c303d026beae9916707d164822c4fdcc6978a7dbcc" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8a2dd4cf3971140bb866e148844f9de8a3b6be7c27da8a51cfaa22864fc5dfc0" name="php7-gettext" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1a355809cf0e47ca841b2318b8839097bcbac1bd1e38994913fa9159013d8d8c" name="php7-gettext" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c480b6029827dd8ad505a83c010a8c9dc283aebea2653c2e80bb2e87520d0f0e" name="php7-gettext" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="93f49cc20e1f58f04e10b7c0c09d9b3fa23ecb74d8993255eabec6e9ddac2876" name="php7-gettext" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a73ea995c37c32c26ac1105dfaaf00f67e9b859feafb9c428417518cbc0b76b5" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c095e315a435cc645ccd049e8d539962b169ac194e63f08621a06965219529a7" name="php7-gmp" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="032a4dbe9ac09a6059b2199e14bd2756ae1078f886021fb3642c7927f1f49d34" name="php7-gmp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="bbce23e056a0a47b92692e986fb63901bee9db8324f03530721d56f1eb8ff98a" name="php7-gmp" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="237180ef758ead977243d5e7e9c5e5ef0e2af57407a7a19b320aa116a0b5c16b" name="php7-gmp" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="fb15df3796a501495f69b395c03d9c27284e8912d1bc8633dadf106078f9fc07" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5fb12bc74e2536bb9a6a468ef805fe782a706da21b947e9bbe84c933b482e819" name="php7-iconv" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e6dc0da5096f7ac1ea0ffac57d04bcabac7b04b1b39725aef8ef6f77e93b28fe" name="php7-iconv" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b35cbf39bfd7c5b154d7ec339e2cfd583486a74e08fc1f406db3f52b301e673e" name="php7-iconv" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6937ad6cc4fbd0c7ce15bef6055933fd98c8bd44957a70d6eae1c11720421dba" name="php7-iconv" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="948971a60a58aded83f10ce2d1d11bd47dbf2666988dbbb3bb310052693b4a23" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="274d7a0818adc0391b5b506a461ef428cb9ccf0a91ed483e342e0007cd265714" name="php7-intl" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="072ad6265120b52ca0624277c5b99c61e23d642d3737a2551cac862207ec91d2" name="php7-intl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="313f44c1a8baa21c033d76337c327a4c3b143de9c59eb7755810458b9426dd6e" name="php7-intl" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b17d83b0286af9fb751489d237c3d4509d1536f03e83011ab24d4ac573af7162" name="php7-intl" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0c7da2ee214744f8f7a693f5d2c92861da51f1dabc5d42a0ac6d56eb80b22198" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5c23d92a0c6d597576d47d70f9b90ff085795a349d68eafeb7ad91c891040897" name="php7-json" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="010e92b3b84f9ee59051b996f5e051fb17edb796c2191926f9b8b4880dc01142" name="php7-json" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="46f2962b36cf89300fb2ddaff00e2ad2092ffe106ed81f2bdb593e488d44b346" name="php7-json" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e386251d061c64ee68078dfeedefd2deef133d486b670942f99f12ceff1a841c" name="php7-json" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="801ba0cdc46d5b9db2c0a944d47f91a5e4e1b5648648713bd06ea67aa7c87334" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6f3846ae98dc506915172d24300a55aa4e671bd82aa5db73746c438a1bb5533b" name="php7-ldap" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="9bbc1d16cfa088fbf2191fb3cfc25ed5c24d322897972ea6b5b473b8221e9b84" name="php7-ldap" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="adb09093ca7a53b77bb7972035c5dcd649b21402682276e762be9a04ac6330de" name="php7-ldap" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0259e8035df58a2ae44f5e8b7459d9c36b323696e3371b5fe1075e52723e4bdb" name="php7-ldap" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="99bf30c8008dba820826f7e397b66e3e1fd1bf63fb16090061efd90550e1045b" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8dbff08ce03e40baa4a1a217824fa4d02f0a8042be92d836a733c39ffb18aaf4" name="php7-mbstring" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6163866da6cd137eb04419ce74b0f26da44120868f8e7e6186f5835371b17385" name="php7-mbstring" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0ba8af1f3a65d67f7c4d0c152092f8a08955dc649e499817751677d6989b1ecb" name="php7-mbstring" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="89d2a55db41ed590300daa5c345b34eaff546577b594f4545db11eff427f5b44" name="php7-mbstring" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="456e46995bda5700633c12005a36fd213e028006398d73f37b2b9721d6ce9d95" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="15980d7b49e179343b1c19fac4e421a65a93c3749203a3cd0fde437a2ca9e4da" name="php7-mysql" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a7381f5fc22d53d53ff92c3ade70aad141260138eca9b6795976a785ec8fa7c8" name="php7-mysql" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f5cc39b66d14c584ee6e5cd2dab477c3b96d203b459c6f86e358bc49648660e3" name="php7-mysql" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="70f0ccdedadbd0581bfbeb5239fefc810e241d79ab265bfe044b80db6729859d" name="php7-mysql" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="708b981ca3aac54eeef1e900596d30fa604ac4aa5aad86683ac0987aaff31369" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="594470bd44427f6a09d587d65d994591900c42ec96cef565170f42c2a12c89df" name="php7-odbc" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="553856e0252a79de18fc13dbadba5616de392a13b6cf9ddf511ce55e80307a00" name="php7-odbc" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="66c4840519ac10cf7adba6d67678d497b5d68aa31c3cc4ac36d54d114807513e" name="php7-odbc" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1ea128f33b58422154882ed469e7f4a034214a680d7cc60893d10536207afdc9" name="php7-odbc" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ab426251b132197e805c42852357911cc7c1dee0fdec630b07cec7ecbaa2b275" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="35fc3222c0aea19be838ae98b4048e5ffd4710dd9f680fe114f0e63bc28709c6" name="php7-opcache" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5fb4018ad3f6d967f196e6ec9313172550fd4cbbd9449a301241ba1e547debe1" name="php7-opcache" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="92a4d28a52e99e7db45563ba0df6e623e259f58099d3297560de31ca80797472" name="php7-opcache" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6dbb2ef6a4daea18c60c045011d4e88b8c144ca998ba9425fba201edb10d074e" name="php7-opcache" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e11e11386b567d675c3af08f664119a18cfb3f48548e5518ee6d24dd2736d0c4" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0d682974e17b9ddb8a07572a382aa947345a28e6bd186d15533e1ff5c5fde02c" name="php7-openssl" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="aac51b95993343edbc9175bfa0e73b94d432396cd2743862eb2331135133198b" name="php7-openssl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="bdc020cd07e25b1655ed1db3f42d651669d66832f4dfcb45ee57883765915c0b" name="php7-openssl" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a08761094abb3b3c6708743f4fe286d7c47d37cd3efecc22713e689cfeef7c3a" name="php7-openssl" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0afd8609367e934d3e9aac2abff0125595ef3c678969aea7745ef37d35312ab1" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="51f7ff92aff3945eb97549eab969da2bf1347208e50ba3716951b29e79860251" name="php7-pcntl" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c5f9c4f5cb3a48cf1e29146c8475ab5549c062427162000cc26fc5acdd6fc016" name="php7-pcntl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f6ccaef7b6c6829b8c34b3cac0288b68831825e67edd8c3a5e4ad612b3bd7035" name="php7-pcntl" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="54d81e60ec8b1a569f55dc68de4f452144a3acfb11dcf17c681a5fc000130696" name="php7-pcntl" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="24d9c12466b7bdfe224f1cdf7c930fd5897fe870c89667c3c355f4cc591b3f0d" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f97e8664b1671a1d2ab33657be9ccd185be70d27e61219d7ebb7c8b00e1cb047" name="php7-pdo" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f93cf56b11157ed8e1aaa3583c4312cd68ee42c93decd166e319b8f88711032b" name="php7-pdo" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c43d9400bfb2f37bbbb1885b29f464defa121df01a5df8d80f8ea326c1b7d3c1" name="php7-pdo" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d807d32745eccd9565593334c1658d975e3b32a0f47494d76de683d9955dc84a" name="php7-pdo" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6cb9cf5fe6c8a0b48be960d84f42d58772d040d9d2047c845e925ba3905febf7" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e6d83950d90b46cbc7a83b835e1d1449ea306648085178723561bcb801678e21" name="php7-pear" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6339e16bbb69e739369f233e64a8ba721217d14c887d73e555da6ffbfa3469a9" name="php7-pear-Archive_Tar" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1ab56a6088ef2240eee124603bcb9823978d369894609e33cd5e2f45794e90bd" name="php7-pgsql" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="07d96a0cc3cd174d8cae8ddbff9a49e842c029f9617f3d312b5f704376fffd24" name="php7-pgsql" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="74f5cebb99757b5aa6ddae09bfbd1cea35822d46f9e2c22df4045a7ed7e865c3" name="php7-pgsql" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="bc446042daa2aedaa9d4337503295a6af529f5cf1bbf756aec980718f7f2ebf1" name="php7-pgsql" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="24c9148c185d0464bcbdf166b707cd20b79bb258474b7ea5bfb5904e23f9632c" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e9a1e7f541af0b87f2ddc045c3103771b822f230cf32119f4e76c2c6bbc94bf4" name="php7-phar" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6bba6c2c4cb4a42a33c3b4c90e4f5e643d9d8ddbf3a408a73e4281807e23391b" name="php7-phar" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0422bc1d97ecbb6839e0f21f101c96432311209dc65e8cc3b87837c053f3de0d" name="php7-phar" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0f7e23ef228d8090cfc6cd5b7f7d399963b11ea0d0eeb80327e555874b5d3a5a" name="php7-phar" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a2ac965d818c68e27a77724718cf4414e4c969487738413d077c476a643836ae" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="985b92e58d4bd9a8f74ce15df921999aa6f56c096ba9cdc6c746b2ab0a54a029" name="php7-posix" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="24263b7c35b96f446c81495cdb50a766ba7a4ca194a7daef22e4a242e39e3e19" name="php7-posix" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="04cf19e7039158bab689dba961108f08a05ff53959f15344e33a8650c63c8b05" name="php7-posix" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="a8597f89121176a151c48346940561473f57997052dda6f87a5a631c58836405" name="php7-posix" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="81a4d9e896eee15db226a3fd0c43929aac8c54485ffb97fed5b3f6b17fca7533" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e6956d289deb92393cdf6d412661aa8089b77d9b9cc71f700d0b04555f008dc7" name="php7-readline" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f0ab1e40a899d793f3da2df490aefdb6e6688933b0304b9b91fd25331c5c0823" name="php7-readline" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3e2c01fbdb32160343bd95c9710df76a24d2a09538b783379097e4556e385e1e" name="php7-readline" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b79baf6114d9901b6635c23501c64116520abd343a31685dfe6148c8c035cdb1" name="php7-readline" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1506ffee2a025fe81ced4256eafedd5df8ad206791defcf13d010d9970c0f189" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1bc90a98303362210d7925d09c723585443c3502d8dd584e37a76797354f9558" name="php7-shmop" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="50bc9c15e80709c272e228492614e0dff41cf460951143b2f79e8c15fb73c696" name="php7-shmop" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="4ec5b64b65780931e60665d10ee7e317689da7523fadd19abc3cf7f4d9658644" name="php7-shmop" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="aa1a753f602f8802590d4f5f12fb4794952b7ff86ea578df74c989f4211fa203" name="php7-shmop" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="54afa292fee1753ecb82077cef51f6725ef596a00be9de3a00af015d1479c1f7" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d9f242bca506d4bc1ee26a813cbcdf2e745091d3be2b153ca6afead53a83f1e4" name="php7-snmp" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="24ec4dbdcecaa643ba77979426b3a8d1f4e8507cf72ed307b3f79498d6a5682e" name="php7-snmp" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="82263fa9ea92d726b7ffe41d017611ff60983d15cbdc62e37020423d74127559" name="php7-snmp" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="202910e59f0a05bce0b39f644a696cb6d3742d61f5b6bfda39dc3c4ddc137795" name="php7-snmp" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8def794eb336961c4188ef6b8d2315d26ab013f3800c4e79da5a094603b4bf72" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="7ed4aca4acb53d3f2764376618310681b93f686ef8ed3e3195c1a162fc87fd1a" name="php7-soap" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3d0d1f2d02a751af585fbd505ad5cea6f4fe866a73d346562450aca865a5946f" name="php7-soap" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="33b3c095e18cf4b41d19bb75b9003d038e32ea61e215b02a810320745114a7dc" name="php7-soap" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="9790d898e8a9a3a3375f0e6c27cb1a1c0139a6ca84f5bba6b7f0412f7ffb3576" name="php7-soap" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="792554dfeb6d5ff52c1e74f5c513181679d505a120ef05a7aa7a70c9bf84e205" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3f058fc3b4baa0faea7866ae16a81ff470f3420cd77c611e7a60a682f505201d" name="php7-sockets" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c4d84b823039ac8f0b7ee344f5dc805e88871e741e4e643a6271a0efc5bb0aca" name="php7-sockets" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d0d2adbde8c9660628b6748798b29eb37352939412bb37c3647ebe0281018da4" name="php7-sockets" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="626820d4e24a08309a0cc837b066eedeb422e7e0e5640cea74de6f86463cf6ab" name="php7-sockets" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="86cba8ed12f7db61a20e18cb18701de1578bec0f7fbf251dacab837678e79366" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ff845081f2d2c5c3b88c51c1aaf96a69e3e083f98976592c536fc695badefbc4" name="php7-sodium" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="74f241b8db3cca323df93fe9dec31412b643003b2aced04fabe115f435787f53" name="php7-sodium" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c08bb7cf91a6446d7f96f181fd4ab2a7b4165fc19cbda372987e07448938f004" name="php7-sodium" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6bfc228122ff65ea5c31c16182623640ee75824f071274d7c3180a59fa427921" name="php7-sodium" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="fe6c5f14296f93e68090f57825d3081200314349c9e0631c0a314460283df5ba" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="05c8bce4d13fae788ab179e218caa5f9def4dbdcb25c47a28a74b6d324bbb9e0" name="php7-sqlite" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2794ed4ab9de2527e707e0982bdaba138f8ca6c39db979ca12f85824cc2f4c43" name="php7-sqlite" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ec66b4c2beb49cc127f2259a369ff60d6b76cb4fe0a4dc26624b722c59064e72" name="php7-sqlite" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="54780c3041da48dd280655a8a1d619e4a53d945e04ab9a1a985e9a87b9b4963b" name="php7-sqlite" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="fad0c288e7499e31ccbaa759137f97ab5184ae07e02358f031754dd0d25e96e9" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="621735597038794e3e1632731e7ddf9075c4072f878a9aa281ea2017a37b2e82" name="php7-sysvmsg" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="4c25cdc955a10bf647e8a071b5319b5679803aa176cac85c140fc7fe0e02747e" name="php7-sysvmsg" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="06a8824fe6e6b8fefcd2a94a57bc2297331a07218389e9afc608c703fb132a03" name="php7-sysvmsg" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0010cf6857069ef1c54a2132e275f9f2a0b52561166be223b529b4fc65ca98f8" name="php7-sysvmsg" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b1b371f77d6614382f1623ba2b0d642f66264edc6c73cac74e81cc31b2b2a379" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f5bfb963fa9c9abd3eb732e545a93a801d5e2f3c47c93ff42d2943523b96055b" name="php7-sysvsem" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="dda5e3bd30eee1b9d8d3bf7b22747a1166ee9ce7b9daf1e59ae743057cb91d1f" name="php7-sysvsem" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f87794039f362a1331b2f9bed10ab52c683d7a495ecc2f458cf5d62532e79b92" name="php7-sysvsem" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="ca3c6c479c842fa00d70bce012fe2a219792864dc142f34e8af548dab4346b6c" name="php7-sysvsem" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="06a1a08cd8801da6c6c642e268ce1e58ae91cd73d5fdee77fbbf4af118f37237" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="4e823627e368f413f95748d4489942d41c05d016bacab2e0c85595b3f3d9202a" name="php7-sysvshm" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="7b242141257cec2b70d3eabcfc19c1c9f61e97e32c605bc0473e26282054f8cb" name="php7-sysvshm" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3d476efdeab321f39e291f76889417e711e5ea03741e534bb5e7b3a272ee9701" name="php7-sysvshm" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="52394a61769a7486dcc42207cea6e8c39349ff034084152eb742317209454bcd" name="php7-sysvshm" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8d55be78763db8e73ffdfca0b7f281952a613b8eb37ec56ccc2b356b965492eb" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b129bdc62d2a7dfe699aee3b8d916d16a73311ed717b62049f85aeb59dbc70a0" name="php7-test" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6bd44dd1417e520825d6460179b7b5737ea7ae451b080c1104369cae2fedaafd" name="php7-test" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="565eca01f5d76456e4074d84a6c1e9e434481a5cf101e68c87ef4043d5db1f5e" name="php7-test" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d0a6816df75b2abb767e02326f367ee05fb9d94e8bfdf9e0af97667da8f8b14f" name="php7-test" arch="src">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d2f66329d6a419bf1a9e2c7b73069f3cffcfc8e87c44282292436bca4bfdbbb7" name="php7-test" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0da1dc1453cd5d42423f3e314e805f30674d3b2303432d915389bbd1cd391579" name="php7-tidy" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="f7006b2baf20c9f4496df48ce8decfd92b9db2130ebbf38de5a789020edd18c4" name="php7-tidy" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="39dcdddf377bd69beffcd3ee919f2460b9479cb92f2a5d3d24be5e7a708f9af1" name="php7-tidy" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="29688fb5943a3864a0f38a735516fda1c6d1acdddc3257891453c703ece329b9" name="php7-tidy" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6d4998bbd0e9bd96224e2443db3e40ff4bef18e23b06f5d3669fc0a5435a2b83" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="53a72c067418fda66690c949b89ee3f33dae0ca4cfd0f3f3f10a78010c718197" name="php7-tokenizer" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d7e5609e8aa5a82bfa54078224b95a34f7f71fbfaf8499e86c15acdbe3a23ed3" name="php7-tokenizer" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="bcf6f62edd9be24f1c2718d375615d302578531e3161bb657c5aae4d7ce10590" name="php7-tokenizer" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="d94ac1d42dc46d29cf434050e0d78f2ceaeef117f207e66b7b42db9d0db8fb6a" name="php7-tokenizer" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="bcc97c65b5c13eee8af2c53f88ae742b6522034433ae61741f54fef1f291ba6f" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="2f7a0d86fd7ec98d03509997f0b0184ea337b3214986be7f55248bfdbe8a3435" name="php7-wddx" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0018a9458e6e7475ba482734cb0468e4a777986990407714b80beb15e9860186" name="php7-wddx" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="9e697ce777fad00d14a347ecdace99c369eee91682853b75b978793fada32e68" name="php7-wddx" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="bc3295a4c373afde1aaf30d6d8a2ebf50df4f5ceb68704895d4c41e0811408f7" name="php7-wddx" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="251397c79b8789a85efb68754a07f2bf8e34e9445e48ad1f78e285124a64d0fe" name="php7-wddx" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="4f02fdea74d7c9b91a7c57c3639de40065383e6ecc144e05da05d43b8dc87bab" name="php7-xmlreader" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1cc4a02ef8ba2c776538a413e242013c6a5d909c94ce3922498e2d323b3ee808" name="php7-xmlreader" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0ad5f46018178e6867f74db458ecd5affe93d3f7881e7e6f27944f38ce68125a" name="php7-xmlreader" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5fb214ecae541c963abfa48cc77db9d7a10b5667979a435785bfbe68f9cb3beb" name="php7-xmlreader" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c868ab8f2146e44e7a3d1a24e6153b5debcf716706cbf6c6454f573585d7034f" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5f44c9082ea26ec76579a3acdbad14d79997250c06c2101e3514dfc91a49444a" name="php7-xmlrpc" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="b09f7f71b4e71d4b33d5ab7bd674ec5e5b53481aff8f372f503e32344ec5e458" name="php7-xmlrpc" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="5716867be58aaa914ed76a41a5346a1e8e0b06cc9af71ea7f45b64ec41fddc62" name="php7-xmlrpc" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="4aeb278b3382bd0255c03b7b767a3d193b4031a348512adc434de03fe16efc09" name="php7-xmlrpc" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="aabbcd3b95f03e2aaff5d51b12190ffcc4708e1a11bcb7e59650b07afae9a7fa" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8f148144e60130b2a67603845a0719e126dd256508e7f22d49c6789f23a132c4" name="php7-xmlwriter" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="1b375a5013bba01145a63a4fa4eab35fcc51f49cc985a47f2bc59f4efad3e94a" name="php7-xmlwriter" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="3f06249d1928b8f213dc89628b6b0d6914b93c3dc0ce9278c5d54a90b7f281b1" name="php7-xmlwriter" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="cdafb70884caa26985467fb83e025b8885f45d42c0b9e607d1d575fe6124f409" name="php7-xmlwriter" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="6a877df2a261a26360e581899541b75d8742b76516b936729a0bb0838071098e" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="0cf8cc602fe7d26b06aa9c17ba3791954d04181d4c89e89f892405c5724ee551" name="php7-xsl" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="e98b4e6f7bd8ae7f48e87f410f9c2a62d64839ffc0bc53d6b833dc670f652d71" name="php7-xsl" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="cc77dd7358093096d81fbadb026f5dd844535038f1c0c41bd0b080004660a38a" name="php7-xsl" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c1fbd874de8760d7555a98d81ae8152afdadcac24504719428753c02516aff91" name="php7-xsl" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c4649c434141811371cf70ae94fd82533d1724d6608fc3ebc690ce36e1e49641" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="4f62ea5a829939e7784f946f0953a65354f736004f2632bc6812ec8479d2e7c2" name="php7-zip" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="c4b33691a5235f574ea980ffb5721818572f7f0f61a0abd9ec5561450f421363" name="php7-zip" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="83a8a4c3ca2d57c6625a4e77eaeae61517d6ec26777fc08050f0d3019acf2e6e" name="php7-zip" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8dfea262f4218e712e623ccb30b507c102a787a56b31349134c1fceb5d1b12d1" name="php7-zip" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="fee4bed71b98fac4999f9e736192c35c20fc8af60c6fe886b73c6436839ec751" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="7e69929678a127103481a5ef50a08afe6d5d6fa6ab61cecb3fe5e2b8b33a5370" name="php7-zlib" arch="aarch64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="013c858d8c9cf7d81176f9b9f1f893a13b435f8c3ba327037a84604cbc87bd32" name="php7-zlib" arch="i586">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="72b58125e7e5faf7501f78d0cf94350ea7527a26cf405cf42300233e15fbcc22" name="php7-zlib" arch="ppc64le">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="357abc6a431c8058425dec4dca7bd9066f190830974a2a48d23301e6cb0bfaed" name="php7-zlib" arch="s390x">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="8f4e63bde471b12dc94ecae06784dcbf4141da09ed14d199fb23a2a13a171b0b" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="4.67.2"/>
  <changelog author="pgajdos@suse.com" date="1580904000">- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php7-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php7-CVE-2020-7060.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1583150400">- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php7-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php7-CVE-2020-7063.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1586260800">- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php7-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php7-CVE-2020-7066.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1590408000">- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php7-CVE-2019-11048.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1596542400">- do not install outdated README.SUSE [bsc#1174010]</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602504000">- fix ghost name for /run/php-fpm [bsc#1173786]</changelog>
</package>
<package pkgid="17df9276f7c606051291f840fd9410cdc4fc15fbb55e039c69587e7d0497b4b1" name="plymouth-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="bb9ad6d3a8c51606fc6159656e052795a7a876971737a653c215b1d7c291ebad" name="polkit" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="0eafd154e6dd1154a0e4f7b87726f10826dbd3894782b6eadf91b528f0fa8eb0" name="polkit" arch="i586">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="c3603c3291003201824c9622b9a0d249e84183c0bdd09d6a2f902256a29143e2" name="polkit" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="c0cf2ddbf10372f83f8d6e3e48d50bcc561cf9361703355b12780d45d1d8a020" name="polkit" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="9edc376798d62aa272e3507e53ab509e34372d9a03411fe4b5a33a9f1a74f678" name="polkit" arch="src">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="74f7c8cee41923d795d9d86e550e476fff9b98bff55753b2af8dc6873075da8b" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="00993eebf0c35db599db2a116a270cc86e4c3c408717622e8a33b2d0927d7541" name="polkit-devel" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="81c7397406ebb5d12ed0086aea21d77deb3a13f5178aa951aea0980f881f2120" name="polkit-devel" arch="i586">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="6104693ba2e214fc30f3d450d2a00ea3db741902e586a01ca333b8d0b49b9d72" name="polkit-devel" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="eebf8a83d9250d92d1480131698d2be9dcc25438515edff5ae5e9edf703ef77e" name="polkit-devel" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="8fab53fac1b5de873ee61e121b45adfa81aa866d36e7604c199f6f33b30fbe2a" name="polkit-devel" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="f387b1cb37b308f5a3e8b3a95713702ce350d4aead11bad51ea36952011dc649" name="polkit-doc" arch="noarch">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="47e81ac86ac24ca25d8883285891cf6983e4c5615804635f40faff205d19aac2" name="postgresql13" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="7ef65668b420dd12d99a6e2eee4364ea076d92a4e116351283f186fbf3ad2bc7" name="postgresql13" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="969a91820a1800a5ff0d5705691def60a1e20203738490a7025dd66aafe43e1f" name="postgresql13" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="434cec9a1738d8e38e094d72f70cb0792fbe0441bdcb388edde77ebcc05d603a" name="postgresql13" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="0fb45f9f4a1f70350a43b1764a0b04ad131572524139e9f015c4af27552fc6ad" name="postgresql13" arch="src">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a47ab5296704982eb6a67e7089c5441e1c529437a1406b9ec7079fa375c594af" name="postgresql13" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="c124b6da17e9d32b6f0449494f53d6aeb82bad47b3f332e903dbec009efa0f20" name="postgresql13-contrib" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="7c448600407033ce937ebeaf1ec690946195e82b8e9d68e8daf9f361429abceb" name="postgresql13-contrib" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="d7c1a85b33a60ef8b153504719e3f1c18be9752d5fa34ab68a127d8a136f35dc" name="postgresql13-contrib" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6f2962c9420f7a4a515bf6cc9dda8b453942c305dc574a31cb6b64a79a3a0329" name="postgresql13-contrib" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1a96cf65dc5b395ba34f1c71004551f6a65c027dc6ee17a2a6f84282c56105c7" name="postgresql13-contrib" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="62a8cd2a2a6eb49417c48a0a6963fe16d41b5e2270ddf901644a05ea5225b786" name="postgresql13-devel" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="e3caa911908f5a2cab54a05e97a55cd4ddba20d5cfada1fdabbe96c0140599f1" name="postgresql13-devel" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="fc36e5f9ec33aa6e91a8519e167d1e93998344e8ef0f400189447097b7ad4111" name="postgresql13-devel" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a4fe344024803317878c93946bcf8d477f18240280ebd654a7df9ea82d920a11" name="postgresql13-devel" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="592133f5985de24675d2682b241c931929a1a7a880ac31e1b84b10d5bf1c8dcf" name="postgresql13-devel" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1f8ce352b62b9eae37a6082241a1c7ed5dabbfa217a1f07c910497c2cf257ce0" name="postgresql13-devel-mini" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="7aa3c71c57fb8567372c37763f54a4a6b47025306c4f733a4c4cf2d32d4d701e" name="postgresql13-devel-mini" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a626f02bb883dd8d4baff6ee6991c36324c733eaa2149d5e9bbaf8b098058f2c" name="postgresql13-devel-mini" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="37e1996d3c8ee0192c8a43f8195c9b4297b6535adf8d5fe894c1ec2dec9ba5ca" name="postgresql13-devel-mini" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="5580d36115dcc1dd94df1830a4b24f2a36b0a7df28437ab1f2e8fbfa53cf3fd7" name="postgresql13-devel-mini" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="353cbe55cf2e8f37682c3b6507a1d842d388eb584cf5556cc339ced6d8dbfbe1" name="postgresql13-docs" arch="noarch">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="592c8cc7e1fb40598ae0ee421e786297bf66ffbebfd228c2614a018da5b109bf" name="postgresql13-llvmjit" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3c4dad50a2818eaa43d085f4a32d03b4a6419d415ab47e7ac3ad6510429a044e" name="postgresql13-llvmjit" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="b3d8f464376e464b9857083a488fb373488fe61d5037c86a8760d7925cc85b7a" name="postgresql13-llvmjit" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1b07aac2d7a9e622293954a1b579805f731d5e2fa226cdebf206e27d758bced2" name="postgresql13-llvmjit" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="02b90d86b65b0c0650a5f29b90a27b273f90d7278f84ce5b227d03c2d6d305d5" name="postgresql13-llvmjit" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="61290966c4e6cd5654df265a69b0891c70d58b44861a0b3f4d5eb1b20a346b18" name="postgresql13-plperl" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a30a92ee66d610b80da2d5dabf2c40537678ff62ef064f5dfc95d1762a7689e6" name="postgresql13-plperl" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9bc0fcdc0a182f707ad3f3b51574df26ed4b59ab16f2248497590a86510a3900" name="postgresql13-plperl" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="30e402e0f14542e3d76a5ed52cb5c230f51bc112d24ab02592b0c7e4edd658c9" name="postgresql13-plperl" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="70207cafcdc24519bbe538fefcbb35582bb604f429a6a0a11bbb6c1d8d57d6be" name="postgresql13-plperl" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="40f22c0ed8a2a872af8ed6864b181348cd85284190ffa5bbc25b49b27656e3ec" name="postgresql13-plpython" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a1b1848891ed9b7d76e3f40c27032a7299319b7e4f7181735ac2f214b559ed71" name="postgresql13-plpython" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="ac355821d7973a5a272e76084ceac62c906ecc605d0f8f47ff941e211750fb7e" name="postgresql13-plpython" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="bf8ac0f744baf3eac74899f21714b68d3eda11f751c7bdd662ec1133622ff694" name="postgresql13-plpython" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="e43a5fa6899612dd0717ab43858583991416743276e6fb49293a73d1a3f96042" name="postgresql13-plpython" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="710e3067509a4cafa2cbed35dfcaa92fbe0e0677d72c7b476b25b8787b4702ad" name="postgresql13-pltcl" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1acab5aebeba75781d2da6fd5e449ee44dce8bc88e9e9b841ad057fdfc86cc5e" name="postgresql13-pltcl" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="40ec3018cf930162d77557bae672cacf138d745eafc259da46cc3862a2afdd8d" name="postgresql13-pltcl" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="23374e13a4997c72e5680bf6c1d08459aad1fb81337e8c9199d06db049b5f6e9" name="postgresql13-pltcl" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="cb7b6c3283918cda449a2072ffe0f449169acbe874c15951f0a086378e5114de" name="postgresql13-pltcl" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9088c632cb5a94b5b084acf9220f55e9a95fbb2fb85a4d6fd064f38758990d5f" name="postgresql13-server" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="65ffc10d01cff435a8e7509f4b80a87f2427f0b247bd386f59058e2993f2f18b" name="postgresql13-server" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="538cb8866109614e2ec8f5ab747ff22341fd6ead3b66fc1a35c51df7ad1fe190" name="postgresql13-server" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="40259a7c68c4520646dd6b3941d7c8089d3876929743dac26e94868907485afa" name="postgresql13-server" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1e0eea8159c0631e2b5e125b7814081c1aa5bc44959ac63d5eb525c18b3b03a3" name="postgresql13-server" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="008ab28a0f9ce696c510b2e76f0616f7b1795aa58f655d84cd54376a282e3dda" name="postgresql13-server-devel" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3536318b231b100239057b713e70779682184f84bb5f8c9759cf5ddb19d15584" name="postgresql13-server-devel" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="af965eb4f57ae3a046d44872915c2966d10197add69cebcdb1fabc4a6e05a793" name="postgresql13-server-devel" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="651616bfd1f48d57617ffa6f7b52c28fd64a6994eecf43beb21429314b2a989a" name="postgresql13-server-devel" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6dae8656d0bfdfec0ef6bcc8b9ba0dd790db784c66c622c50ddb63d20ce13377" name="postgresql13-server-devel" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9a41ccad63d4392b1e7cba1760f10bad746ddb53fdd1249298249e433302fdd9" name="postgresql13-test" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="f1f7eced44de167281d9fa25ed6c5b60fa9629a9b55e5b3197ee146bbfcb401d" name="postgresql13-test" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3d7d15e577bbd41812b6e71d9372b332c74d367699a39a6fc330d3702f741e77" name="postgresql13-test" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="4666855af7bf920b9067bb0af8cb986812cf2c8c04c631ac743cb24e78d48bc0" name="postgresql13-test" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a2efd27fa7f4c86fdfd164395063b7ebfa5580411dd5150ef748904fecf75383" name="postgresql13-test" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="56fdff24d0c969d46b60f13a9e0d1bc86f0e956d7b635471c6fb20cd717a6128" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="359b503191792e308466fe1cbfd7ae0e10fd4f180ee0e6dbfce2483c0d31edc3" name="procps" arch="i586">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="a95f1255274906eaf76e842ad800c6af38ba2148522bf33d0415b616b686b10e" name="procps" arch="ppc64le">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="fa32acac4bcabbe2f0d70e0e4151991ab9c1600e637ea051cb1e68956258d73f" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="ab0fb3e8640eb81e6e7ac1d548ceea733794b27971f2253a3e2c32c179fa94bf" name="procps" arch="src">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="2e9746c71d65d539f9d62e2819b83d7810f72d3b3ec8f3fe6843a0265cdac29e" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="ab64e901eb8d29716af82e4d897d3a498dea0fc7ed79a1ddbcc3f626b542e20c" name="procps-devel" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="f954016e82e0a8c539ffa4473a41eaa48a8f3a3106b50d05cec1336933c825c0" name="procps-devel" arch="i586">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="62019086d8fd1d73fb9609329538ff812cf1644e7a372285a5a688b4b040c1db" name="procps-devel" arch="ppc64le">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="218b982f0f7cdb68705202044de56a174455f4b72c878d3c3e34ed78f3733dcc" name="procps-devel" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="70998921716683a6f8170037d2691cefd1881cc04f2602482129d580e57a7ff3" name="procps-devel" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="7.13.2"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
</package>
<package pkgid="203154d211c38ceaa48f5be4e0e3be90cb813b387e45504c434d374c4ae3e541" name="prometheus-ha_cluster_exporter" arch="aarch64">
  <version epoch="0" ver="1.2.0+git.1599131770.8912739" rel="1.9.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1581422400">- Release 1.0.0beta5
  [#]# Fixed
  - Source url in spec file (#128)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1581508800">- Release 1.0.0beta6
  [#]# Changed
  - Revert full Source url usage and reinstate OBS source service in the build pipeline (#129)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
</package>
<package pkgid="fb0af54e79394c1fd73355f22523eeb0d7da27069547b307e6a94a8658228008" name="prometheus-ha_cluster_exporter" arch="ppc64le">
  <version epoch="0" ver="1.2.0+git.1599131770.8912739" rel="1.9.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1581422400">- Release 1.0.0beta5
  [#]# Fixed
  - Source url in spec file (#128)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1581508800">- Release 1.0.0beta6
  [#]# Changed
  - Revert full Source url usage and reinstate OBS source service in the build pipeline (#129)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
</package>
<package pkgid="afa5c929f3e7da7b05f1db7b422c711368686a111165b954fb575408b32031a4" name="prometheus-ha_cluster_exporter" arch="s390x">
  <version epoch="0" ver="1.2.0+git.1599131770.8912739" rel="1.9.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1581422400">- Release 1.0.0beta5
  [#]# Fixed
  - Source url in spec file (#128)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1581508800">- Release 1.0.0beta6
  [#]# Changed
  - Revert full Source url usage and reinstate OBS source service in the build pipeline (#129)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
</package>
<package pkgid="52ea42905822463f1e20b6d1949ffce45146cc95845ac2866036c2ed868e2a64" name="prometheus-ha_cluster_exporter" arch="src">
  <version epoch="0" ver="1.2.0+git.1599131770.8912739" rel="1.9.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1581422400">- Release 1.0.0beta5
  [#]# Fixed
  - Source url in spec file (#128)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1581508800">- Release 1.0.0beta6
  [#]# Changed
  - Revert full Source url usage and reinstate OBS source service in the build pipeline (#129)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
</package>
<package pkgid="7d3882071db5c01493a21cb186cd3cca0c3ccab188037761aeb7c9b08b58a97f" name="prometheus-ha_cluster_exporter" arch="x86_64">
  <version epoch="0" ver="1.2.0+git.1599131770.8912739" rel="1.9.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1581422400">- Release 1.0.0beta5
  [#]# Fixed
  - Source url in spec file (#128)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1581508800">- Release 1.0.0beta6
  [#]# Changed
  - Revert full Source url usage and reinstate OBS source service in the build pipeline (#129)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
</package>
<package pkgid="637795e9e9813133620c7243d303e762358034a22685988695f6b8ac97e65004" name="prometheus-ha_cluster_exporter" arch="aarch64">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="bbca1361d5bba070456d272803c0ea3fa5128cbf7ec34a2d7ae23df00483ad74" name="prometheus-ha_cluster_exporter" arch="ppc64le">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="1b125e7f01618ac1a90064634974d241189fa27f42e96d968655b0f06e3a3903" name="prometheus-ha_cluster_exporter" arch="s390x">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="42abbcfd1c491751d6a287d5e60b1c504e6fecc30fd11da14deced4c8385d7fc" name="prometheus-ha_cluster_exporter" arch="src">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="d29009379fbdca5ff3b74ce8357836588286c3c134d61b9e53d9e1632160f686" name="prometheus-ha_cluster_exporter" arch="x86_64">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="a4a2d642a5edcd0d4935a5151488a80bcee501916c753d33c8932778e5c48c15" name="prometheus-hanadb_exporter" arch="noarch">
  <version epoch="0" ver="0.7.2+git.1600770990.726a4fe" rel="1.6.1"/>
  <changelog author="xarbulu@suse.com" date="1572004800">- Version 0.5.0 Add the option to export metrics from multiple
  databases/tenants</changelog>
  <changelog author="dakechi@suse.com" date="1573041600">- Version 0.5.1 Add the SAP HANA current alerts rating metric.
  This metric expose the current triggered alerts coming from
  inside the database and the rating (severity) of them. The rating
  is classified between 1 and 5.</changelog>
  <changelog author="xarbulu@suse.com" date="1575892800">- Version 0.5.2 Add the option to use the hanadb_exporter with
  the stored user key. This gives the option to avoid the plain
  user/password strings usage.</changelog>
  <changelog author="xarbulu@suse.com" date="1575979200">- Version 0.5.3 Improve metrics collection if some of the rows
  result is None. Before, if any result was None the result was
  not exported. Now, only metrics with None value are ommitted</changelog>
  <changelog author="xarbulu@suse.com" date="1575979201">- Version 0.6.0 Change configuration files location from /etc
  to /usr/etc</changelog>
  <changelog author="xarbulu@suse.com" date="1579089600">- Version 0.6.1 Fix use case where TENANT_DATA_QUERY query
  returns columns with invalid values (0 number)</changelog>
  <changelog author="xarbulu@suse.com" date="1581422400">- Version 0.7.0 created
- Rename the rpm package to prometheus-hanadb_exporter to follow
  the prometheus conventions
- Update the default port from 8001 to 9668
  (jsc#SLE-10545)</changelog>
  <changelog author="julien.adamek@suse.com" date="1588161600">- Fix and improve the README file (bsc#1170843)</changelog>
  <changelog author="xarbulu@suse.com" date="1588680000">- Version 0.7.1 Fix the case where HELP and TYPE entries are exported
  even though there is not any record for that metric (bsc#1170717)
  (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1601553600">- Release 0.7.2
  [#] Added
  - lookup for `/usr/etc` and  the fallback `/etc` directory for config files. ( https://github.com/SUSE/hanadb_exporter/pull/78)</changelog>
</package>
<package pkgid="6dee371927c8004a739e1aca014f9c9808c7e2fa048d59dc660f1ca9a9804ba1" name="prometheus-hanadb_exporter" arch="src">
  <version epoch="0" ver="0.7.2+git.1600770990.726a4fe" rel="1.6.1"/>
  <changelog author="xarbulu@suse.com" date="1572004800">- Version 0.5.0 Add the option to export metrics from multiple
  databases/tenants</changelog>
  <changelog author="dakechi@suse.com" date="1573041600">- Version 0.5.1 Add the SAP HANA current alerts rating metric.
  This metric expose the current triggered alerts coming from
  inside the database and the rating (severity) of them. The rating
  is classified between 1 and 5.</changelog>
  <changelog author="xarbulu@suse.com" date="1575892800">- Version 0.5.2 Add the option to use the hanadb_exporter with
  the stored user key. This gives the option to avoid the plain
  user/password strings usage.</changelog>
  <changelog author="xarbulu@suse.com" date="1575979200">- Version 0.5.3 Improve metrics collection if some of the rows
  result is None. Before, if any result was None the result was
  not exported. Now, only metrics with None value are ommitted</changelog>
  <changelog author="xarbulu@suse.com" date="1575979201">- Version 0.6.0 Change configuration files location from /etc
  to /usr/etc</changelog>
  <changelog author="xarbulu@suse.com" date="1579089600">- Version 0.6.1 Fix use case where TENANT_DATA_QUERY query
  returns columns with invalid values (0 number)</changelog>
  <changelog author="xarbulu@suse.com" date="1581422400">- Version 0.7.0 created
- Rename the rpm package to prometheus-hanadb_exporter to follow
  the prometheus conventions
- Update the default port from 8001 to 9668
  (jsc#SLE-10545)</changelog>
  <changelog author="julien.adamek@suse.com" date="1588161600">- Fix and improve the README file (bsc#1170843)</changelog>
  <changelog author="xarbulu@suse.com" date="1588680000">- Version 0.7.1 Fix the case where HELP and TYPE entries are exported
  even though there is not any record for that metric (bsc#1170717)
  (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1601553600">- Release 0.7.2
  [#] Added
  - lookup for `/usr/etc` and  the fallback `/etc` directory for config files. ( https://github.com/SUSE/hanadb_exporter/pull/78)</changelog>
</package>
<package pkgid="30a9e8020294f72ec110ba52c2f4dd7e9b0db7512815c929134f92ee015d002a" name="purge-kernels-service" arch="noarch">
  <version epoch="0" ver="0" rel="8.3.1"/>
  <changelog author="msuchanek@suse.de" date="1576238400">- Intial package purge-kernels-service (jsc#SLE-10162, jsc#SLE-10465)</changelog>
  <changelog author="msuchanek@suse.de" date="1579521600">- Fix dracut version in conflicts.</changelog>
  <changelog author="msuchanek@suse.com" date="1579867200">- Fix zypper asking for confirmation in service (boo#1161620).</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Fix typo in Summary.</changelog>
  <changelog author="msuchanek@suse.com" date="1583150400">- Clear do_purge_kernels with ExecStartPost rather than ExecStartPre (boo#1162163).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1583668800">- Set build architecture to noarch.</changelog>
  <changelog author="msuchanek@suse.de" date="1590580800">- Add split provides for upgrade from old dracut (boo#1168727).</changelog>
  <changelog author="msuchanek@suse.de" date="1620302400">- Add ZYPP_LOCK_TIMEOUT=-1 to keep waiting for the lock (boo#1184399).</changelog>
</package>
<package pkgid="e7ec2be1e462aedb4192a0a3c8cd0a0eba1669cdbfea9b051c6fa725ea962826" name="purge-kernels-service" arch="src">
  <version epoch="0" ver="0" rel="8.3.1"/>
  <changelog author="msuchanek@suse.de" date="1576238400">- Intial package purge-kernels-service (jsc#SLE-10162, jsc#SLE-10465)</changelog>
  <changelog author="msuchanek@suse.de" date="1579521600">- Fix dracut version in conflicts.</changelog>
  <changelog author="msuchanek@suse.com" date="1579867200">- Fix zypper asking for confirmation in service (boo#1161620).</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Fix typo in Summary.</changelog>
  <changelog author="msuchanek@suse.com" date="1583150400">- Clear do_purge_kernels with ExecStartPost rather than ExecStartPre (boo#1162163).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1583668800">- Set build architecture to noarch.</changelog>
  <changelog author="msuchanek@suse.de" date="1590580800">- Add split provides for upgrade from old dracut (boo#1168727).</changelog>
  <changelog author="msuchanek@suse.de" date="1620302400">- Add ZYPP_LOCK_TIMEOUT=-1 to keep waiting for the lock (boo#1184399).</changelog>
</package>
<package pkgid="11c18a3c5078f2697488af40ad79285b3cf5014e9c3a013ff0ec6e9753e71bbc" name="python" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="ac7ef82fc892b69c1084d86b2df259b14515a5a337ddbea7a483a3e3410b64dc" name="python" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="9710e8ce07993dd99cc23f879e0651e893137f764b03c5843bdf0e0fae06443f" name="python" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="e5af303ff393ee8f881226bd5de7bf991da45a21ca7e2475ebf65a80b766fc9a" name="python" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="b631bf023f4d6f20f765c5e053afa1ea91c0c97d1cd75a7c7da89f51b0a32790" name="python" arch="src">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="85e40342b7dfa90160402a6bcd64dddca23e7b707f03408f0ca991bf7e8cdd2f" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="a62e7009671c18e00fa26264edeeeb6d49c378011989bda89145ce8a6864b1a0" name="python-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="8599d3886ed80659bcaabf9fa76b579a9a64ef7f9bbe98e0088d1f75c1cc9429" name="python-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="5572389e7af2998c4923b5c0287dbccc591dd5c7bc5f426c4b6fff64167d085b" name="python-aliyun-img-utils" arch="src">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="e24efcf7586bf50899f1ee03f7e68c8b0f6a6ec81b8764a8d0fcbfc06d0ca399" name="python-base" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="521ec04cac726a45a75fed84e6b4333af6edd09d82e8d7cd2e243cc508c3ca19" name="python-base" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="4c6646c0a7682c5c1e9397d532d97a806fec3ba03db3f01cacd48b1c78b8b92b" name="python-base" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="d46ef438bf428043090a47f61c992aa5e37c96185e4179e0422d13009a2dc9eb" name="python-base" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="8e6d09e8a5d64d1d4899789de20409d13503659aba4faeabe81759a982089267" name="python-base" arch="src">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="6d813f8dd17aa1fa7f8244c4e669a16b756db851a805766e7a88c10325888359" name="python-base" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="835155e378c0a75a2da0ef8931b6664840fba9f8ef3ad52f0f1e5758b41d732a" name="python-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="cc8864bc003ab163c8ae692d989a7a3b8802e05a3cbf2682fbe68dc2868ffeed" name="python-base-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="63c4fba13da7d0547f1c9959f9f5ee4ac04a1a97d58c866e8ff671f7c1d64172" name="python-cheroot" arch="src">
  <version epoch="0" ver="5.4.0" rel="3.6.1"/>
  <changelog author="jmatejek@suse.com" date="1490961600">- initial commit</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1588852800">- Avoid possible race condition on persistent HTTP connections (bsc#1169604)
- Added:
  * 0001-Avoid-race-condition-on-persistent-HTTP-connections.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1603800000">- Ignore OpenSSL's 1.1+ Error 0 under any Python
  while wrapping a socket (bsc#1176988)
- Added:
  * 0002-Ignore-OpenSSL-1.1+-Error-0-under-any-Python-while-wrapping-a-socket.patch</changelog>
</package>
<package pkgid="7130aa5ec1d17babbac960082c6721604f26e7730602bdeca3f310496d002adb" name="python-click-man" arch="src">
  <version epoch="0" ver="0.4.1" rel="5.3.2"/>
  <changelog author="sean.marlow@suse.com" date="1574683200">- Initial release. v0.3.0
- get-short-help.patch adds get_short_help_str function and
  supports older versions of python-click. get_short_help_str was
  added to Click in version &gt;= 7.0.0.
- Use pytest instead of nose for unit tests.</changelog>
  <changelog author="tchvatal@suse.com" date="1575547200">- Switch to github archive as the tests are not present on pypi
  version</changelog>
  <changelog author="mcalabkova@suse.com" date="1585656000">- Update to 0.4.1
  * Discover command if not in entry_points
- Reapplied patch get-short-help.patch
- No need to use upstream tarball, download PyPI tarball instead</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="25671da1ccac681a80a01531acbcc1f978c9d99dc8c36ed00283cca9a07a6587" name="python-crcmod" arch="src">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="3a9748679772fe1be5508e71831b5f5a11c3cd4d40b210ba78472a32d3ae433d" name="python-curses" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="c75a1541e08b19ba527a0543ca87bbf3fab6297369a636612146bcfb32ebee41" name="python-curses" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="1b14adb72b0fb6b65a0951f06bee56c9da65e5a4f49229abd9d1df3739a20eeb" name="python-curses" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="984aacecaf2d89090259270596a6b925813d701864f6ccbba7d871e8368c14d1" name="python-curses" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="8df3449efd779a4b5bbcfd97f2292aa4e6229b5834ed7087ba1a9e1c2246b155" name="python-curses" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="70a2d7ec4d662ccf71be5588a8f1e2fe93a3e6913166e446434b7df2a92d7004" name="python-demo" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="6568b58d246a7c9703f551bcd95da52b4eafc844929430fb3f968aefeb9aa67c" name="python-demo" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="3fd8c54a82aefd5c1db92793e9db7f071b1842cbeb6ea7c640f6c55d7e9fa7a9" name="python-demo" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="ef0fd3f33e45fc1cbc4427f6a013937a0fdd0bc8684efbacfbf69df2527bb619" name="python-demo" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="5cb1fc45f377ccddb0c7138aeb9540636c46edda5ecaf035b355d56c1167d2f9" name="python-demo" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="61eb67709d78b022c803d867c5a19833221e02c6b739bca34a3c4bc315caa99c" name="python-devel" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="9989bb7dab60950ec17be2b90e5e4f4b18a3fb7f90ea19e1a8c93a2587bd1069" name="python-devel" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="eafd34ed3fd808df82aefe5a6d56555b096d333cb077979c8f7467519f8f5a99" name="python-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="1e54ed1474a5507097c9d9629ca6ab7678a3cc345586f1974fd8c3cbb94db60e" name="python-devel" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="b4b9caa9b8d479aebf1c87bfed8d51a63369a52bd7d2226a11204ae471aa272d" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="9e07d69efea53889096e182547f9e1b70e9275da1dcb5946117308a63462a2eb" name="python-doc" arch="noarch">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="44352b4b0b5e6cdb5cc5ae16111d9d2ac507d732e18f0592a75a629b7d5716fe" name="python-doc" arch="src">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="96c975f6d89f0b2a66e56dca63046e86bf6522cd82e445652d63f83722e12273" name="python-doc-pdf" arch="noarch">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="1e1955fda430ef7a3d5397ab345662c707b6846b43a1b19858dcb369cfd41d4a" name="python-docker" arch="src">
  <version epoch="0" ver="4.2.0" rel="3.2.1"/>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
</package>
<package pkgid="a255225d0719d0232b18c60c588c318e31eb6c09f49f88e9903af9741875c061" name="python-docker-pycreds" arch="src">
  <version epoch="0" ver="0.4.0" rel="3.2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Add the description
- Remove the SLE11 case</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478260800">- relax test-requirements so that it builds on Factory</changelog>
  <changelog author="jengelh@inai.de" date="1478260801">- Summary/Description update</changelog>
  <changelog author="dmueller@suse.com" date="1487678400">- update fix-requirements.patch: drop flake8
- fix source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1501761600">- Implement single-spec version
- Remove fix-requirements.patch
  This is only needed for setup.py test, which doesn't actually
  run the tests anyway so isn't used.</changelog>
  <changelog author="arun@gmx.de" date="1519387200">- specfile:
  * update copyright year
  * add flake8 and pytest-cov to test requirements (according to setup.py)
- update to version 0.2.2:
  * Add support for docker-credential-pass
  * Add test-running Dockerfile
  * Update setup.py</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 0.2.3:
  * Various small cleanups and more CI integrations</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 0.3.0:
  * Allow overriding environment variables for credstore invocation</changelog>
  <changelog author="dmueller@suse.com" date="1539086400">- remove unused flake8 dependency</changelog>
  <changelog author="hvogel@opensuse.org" date="1547467200">- update to version 0.4.0:
  * Add support for store.list</changelog>
</package>
<package pkgid="7d4db1fcd155530bfa8d1617a99ec926489487acfb6d0b53183791f5b766776c" name="python-gdbm" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="700683bd8c0b7d41738bf99277a35b7dba4547650b1d81aefb2ff3f6c5273df6" name="python-gdbm" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="7bc086be73a30afa9cfd0d584f8afd6f96c00f0ec51444a0b05005247073784d" name="python-gdbm" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="da70dfbe673a154a01116d078e509bd1f2250c747616c7b8453b31ca7091731a" name="python-gdbm" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="c5c4b6e50bc37495f135a0d266114f0014386ed0cd4ac1426ae38af86b7506b0" name="python-gdbm" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="da546a509d08ace9f7f1f6eefd322e3d4f1f419c9d563cac6ec57ca7f2f55e1c" name="python-httplib2" arch="src">
  <version epoch="0" ver="0.19.0" rel="3.3.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="c7f48f5f590eea390934eaa596ec44347b00e1f9810d07344d45841b6897bafa" name="python-idle" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="1bbdc017cd489421f5b6914cc3b8eee180f36e62bd6c94c030e55037e80ce334" name="python-idle" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="475079a1549ab79dd645b241798a7022f5d36b0c8af773e490fad88cbae30d16" name="python-idle" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="1481b68999e0eb5e1d048e06a3ca6d8f196c477611907bf9532b455f016d2b39" name="python-idle" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="f973e7ba061fde92c121581fc54c1ba6e40fb8be4c1114815a9a13e6851abbb8" name="python-idle" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="37d9348a79156118ede22f89a33a3f7c16e179de0f3275feaf767795ff704dd3" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="9beac40f948725a4f348b1b46d903460903d651fe0cb985c9e07d83149787f4e" name="python-libproxy" arch="noarch">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="fc1b8f2c5295355270246922fc757daf1749a81d4a9a2b53bffe9612b22bdd68" name="python-magic" arch="src">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="4720d70944bd74cc08ce4e33c16a71070eec5083637db4c4e7e3b4f51fed0a54" name="python-mock" arch="src">
  <version epoch="0" ver="3.0.5" rel="5.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1437998400">- python-mock now requires python-pbr</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445860800">- BuildRequires python-funcsigs.  It was already in Requires,
  but is also needed at build time for unit tests.</changelog>
  <changelog author="frede@b1-systems.de" date="1452254400">- BuildRequires python-setuptools &gt;= 17.1 If you have a lower
  version the build will fail.</changelog>
  <changelog author="tbechtold@suse.com" date="1464868800">- update to 2.0.0:
  * Fix #338: depend on a fixed version of funcsigs
  * More 3.2 support dropping cleanup
  * Update sync point
  * Add Mock.assert_called()
  * Issue25347 - Format the error message output of mock's assert_has_calls method
  * Issue #22138: Fix mock.patch behavior when patching descriptors. Restore original values after patching
  * Issue #24857: Comparing call_args to a long sequence now correctly returns a boolean result instead of raising an exception
  * Issue #23004: mock_open() now reads binary data correctly when the type of read_data is bytes
  * Add version info in the docs
  * Update six to a version with raises_from
  * Fix #328 - handle unicode __repr__ on Python 2.x
  * Drop support for Python 3.2
  * Fix typo in docs/index.txt
  * Fix README.rst checking
  * Be clearer about Python version compat
  * Issue #295: use a setup_requires dependency
  * Improve grouping of imports in tests
  * Use six to detect python2/3 in main module
  * Use six to detect python2/3 in test modules
- adjust Requires
- use pypi.io as Source url</changelog>
  <changelog author="tbechtold@suse.com" date="1475755200">- Fix pytohn-funcsigs Requires</changelog>
  <changelog author="jmatejek@suse.com" date="1475755201">- update for multipython build
- remove test runner because it performs dark magic that
  causes a failure in test suite
- implement fallback to python's own unittest instead of unittest2
  if we're on Python 3 (to avoid dependencies on funcsigs and unittest2)
  (unittest2-fallback.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- adjust requires for singlespec'ified python-funcsigs</changelog>
  <changelog author="tchvatal@suse.com" date="1515067200">- Condition python2 build to ensure we can build py3 only package</changelog>
  <changelog author="mcepl@suse.com" date="1534161600">- Remove dependency on unittest2
  Add remove_unittest2.patch to facilitate that
  Remove unnecessary now unittest2-fallback.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1557835200">- update to 3.0.5
- drop remove_unittest2.patch
  * more in CHANGELOG.rst</changelog>
</package>
<package pkgid="473140ae8c413e809cf2c926dabc579b606b2de220737e6a4ddeb10828d1f67d" name="python-oss2" arch="src">
  <version epoch="0" ver="2.14.0" rel="5.3.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1617883200">- Initial build
  + Version 2.14.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="f4cc9f9ef90b0ad48056bbbc118830676884472090a3dc0f9d3727c641ffba14" name="python-parallax" arch="src">
  <version epoch="0" ver="1.0.6" rel="3.3.14"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Release 1.0.2
- Switch to new singlespec packaging</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Release 1.0.3
- Add to_ascii function to convert byte message to str (bsc#1066330)</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Release 1.0.4
- Fix super call for python2 (bsc#1099514)</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1544443200">- Fix Source URL
- Fix fdupes call</changelog>
  <changelog author="kgronlund@suse.com" date="1545134400">- Obsolete old python-parallax package (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1559044800">- Work around hidden python packaging magic (bsc#1131136)</changelog>
  <changelog author="kgronlund@suse.com" date="1566475200">- Release 1.0.5
- Surpress warning messages when needed (bsc#1146748)
- Fix assert_ DeprecationWarning</changelog>
  <changelog author="kgronlund@suse.com" date="1585742400">- Release 1.0.6
- Replace preexec_fn as start_new_session
- No need to mask signals for subprocess call</changelog>
  <changelog author="XLiang@suse.com" date="1589889600">- Add ssh_key option used by -i option of ssh and scp(bsc#1169581)
  Add patch 0001-Add-ssh_key-option-used-by-i-option-of-ssh-scp.patch</changelog>
</package>
<package pkgid="56bd7d65718d459adc2d86410c46dbe4d5297770b0e6a06adc2a7f7069adcebd" name="python-py" arch="src">
  <version epoch="0" ver="1.8.1" rel="5.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="dad7d8c586e8b08ff9a9624c22d3704fcc9dac94e7c34f88e4e5691316669ecf" name="python-py-test" arch="src">
  <version epoch="0" ver="1.8.1" rel="5.6.5"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="08aee8e266fa3a338dbf576d5aadc45011d619c138d20b7312c937a480cb1c1f" name="python-redis" arch="src">
  <version epoch="0" ver="3.4.1" rel="3.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1542369600">- add recommendation for python-hiredis as requested by @mimi_vx in Request#649524</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Update to 3.1.0:
  * Connection URLs must have one of the following schemes:
    redis://, rediss://, unix://. Thanks @jdupl123. #961/#969
  * Fixed an issue with retry_on_timeout logic that caused some TimeoutErrors
    to be retried. Thanks Aaron Yang. #1022/#1023
  * Added support for SNI for SSL. Thanks @oridistor and Roey Prat. #1087
  * Fixed ConnectionPool repr for pools with no connections. Thanks
    Cody Scott. #1043/#995
  * Fixed GEOHASH to return a None value when specifying a place that
    doesn't exist on the server. Thanks @guybe7. #1126
  * Fixed XREADGROUP to return an empty dictionary for messages that
    have been deleted but still exist in the unacknowledged queue. Thanks
    @xeizmendi. #1116
  * Added an owned method to Lock objects. owned returns a boolean
    indicating whether the current lock instance still owns the lock.
    Thanks Dave Johansen. #1112
  * Allow lock.acquire() to accept an optional token argument. If
    provided, the token argument is used as the unique value used to claim
    the lock. Thankd Dave Johansen. #1112
  * Added a reacquire method to Lock objects. reaquire attempts to renew
    the lock such that the timeout is extended to the same value that the
    lock was initially acquired with. Thanks Ihor Kalnytskyi. #1014
  * Stream names found within XREAD and XREADGROUP responses now properly
    respect the decode_responses flag.
  * XPENDING_RANGE now requires the user the specify the min, max and
    count arguments. Newer versions of Redis prevent ount from being
    infinite so it's left to the user to specify these values explicitly.
  * ZADD now returns None when xx=True and incr=True and an element
    is specified that doesn't exist in the sorted set. This matches
    what the server returns in this case. #1084
  * Added client_kill_filter that accepts various filters to identify
    and kill clients. Thanks Theofanis Despoudis. #1098
  * Fixed a race condition that occurred when unsubscribing and
    resubscribing to the same channel or pattern in rapid succession.
    Thanks Marcin Raczy?ski. #764
  * Added a LockNotOwnedError that is raised when trying to extend or
    release a lock that is no longer owned. This is a subclass of LockError
    so previous code should continue to work as expected. Thanks Joshua
    Harlow. #1095
  * Fixed a bug in GEORADIUS that forced decoding of places without
    respecting the decode_responses option. Thanks Bo Bayles. #1082
- Drop no longer needed redis-skip-rounding.patch</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1550491200">- Update to 3.2.0 bsc#1131555:
  * Added support for `select.poll` to test whether data can be read
    on a socket. This should allow for significantly more connections to
    be used with pubsub. Fixes #486/#1115
  * Attempt to guarentee that the ConnectionPool hands out healthy
    connections. Healthy connections are those that have an established
    socket connection to the Redis server, are ready to accept a command
    and have no data available to read. Fixes #1127/#886
  * Use the socket.IPPROTO_TCP constant instead of socket.SOL_TCP.
    IPPROTO_TCP is available on more interpreters (Jython for instance).
    Thanks @Junnplus. #1130
  * Fixed a regression introduced in 3.0 that mishandles exceptions not
    derived from the base Exception class. KeyboardInterrupt and
    gevent.timeout notable. Thanks Christian Fersch. #1128/#1129
  * Significant improvements to handing connections with forked processes.
    Parent and child processes no longer trample on each others' connections.
    Thanks to Jay Rolette for the patch and highlighting this issue.
    [#504]/#732/#784/#863
  * PythonParser no longer closes the associated connection's socket. The
    connection itself will close the socket. #1108/#1085</changelog>
  <changelog author="jayvdb@gmail.com" date="1553601600">- Update to v3.2.1
  * Fix SentinelConnectionPool to work in multiprocess/forked
    environments</changelog>
  <changelog author="jayvdb@gmail.com" date="1554033600">- Add missing build dependency setuptools</changelog>
  <changelog author="mcalabkova@suse.com" date="1565611200">- Update to v3.3.6
  * Resolve a race condition with the PubSubWorkerThread. #1150
  * Response callbacks are now case insensitive.
  * Added support for hiredis-py 1.0.0 encoding error support.
  * Add READONLY and READWRITE commands.
  * Added extensive health checks that keep the connections lively.
  * Many more changes, see upstream changelog.</changelog>
  <changelog author="tchvatal@suse.com" date="1568116800">- Update to 3.3.8:
  * Fixed MONITOR parsing to properly parse IPv6 client addresses
  * Fixed a regression introduced in 3.3.0</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * be more specifc in %files section
- update to version 3.3.11:
  * Further fix for the SSLError -&gt; TimeoutError mapping to work on
    obscure releases of Python 2.7.
- changes from version 3.3.10:
  * Fixed a potential error handling bug for the SSLError -&gt;
    TimeoutError mapping introduced in 3.3.9. hanks @zbristow. #1224
- changes from version 3.3.9:
  * Mapped Python 2.7 SSLError to TimeoutError where
    appropriate. Timeouts should now consistently raise TimeoutErrors
    on Python 2.7 for both unsecured and secured connections. Thanks
    @zbristow. #1222</changelog>
  <changelog author="buschmann23@opensuse.org" date="1576238400">- Fix tests with redis pre 5.0.0:
  * 0001-fix-tests-with-redis-pre-5.0.0.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584619200">- version update to 3.4.1
  * 3.4.1
  * Move the username argument in the Redis and Connection classes to the
    end of the argument list. This helps those poor souls that specify all
    their connection options as non-keyword arguments. #1276
  * Prior to ACL support, redis-py ignored the username component of
    Connection URLs. With ACL support, usernames are no longer ignored and
    are used to authenticate against an ACL rule. Some cloud vendors with
    managed Redis instances (like Heroku) provide connection URLs with a
    username component pre-ACL that is not intended to be used. Sending that
    username to Redis servers &lt; 6.0.0 results in an error. Attempt to detect
    this condition and retry the AUTH command with only the password such
    that authentication continues to work for these users. #1274
  * Removed the __eq__ hooks to Redis and ConnectionPool that were added
    in 3.4.0. This ended up being a bad idea as two separate connection
    pools be considered equal yet manage a completely separate set of
    connections.
  * 3.4.0
  * Allow empty pipelines to be executed if there are WATCHed keys.
    This is a convenient way to test if any of the watched keys changed
    without actually running any other commands. Thanks @brianmaissy.
    [#1233], #1234
  * Removed support for end of life Python 3.4.
  * Added support for all ACL commands in Redis 6. Thanks @IAmATeaPot418
    for helping.
  * Pipeline instances now always evaluate to True. Prior to this change,
    pipeline instances relied on __len__ for boolean evaluation which
    meant that pipelines with no commands on the stack would be considered
    False. #994
  * Client instances and Connection pools now support a 'client_name'
    argument. If supplied, all connections created will call CLIENT SETNAME
    as soon as the connection is opened. Thanks to @Habbie for supplying
    the basis of this change. #802
  * Added the 'ssl_check_hostname' argument to specify whether SSL
    connections should require the server hostname to match the hostname
    specified in the SSL cert. By default 'ssl_check_hostname' is False
    for backwards compatibility. #1196
  * Slightly optimized command packing. Thanks @Deneby67. #1255
  * Added support for the TYPE argument to SCAN. Thanks @netocp. #1220
  * Better thread and fork safety in ConnectionPool and
    BlockingConnectionPool. Added better locking to synchronize critical
    sections rather than relying on CPython-specific implementation details
    relating to atomic operations. Adjusted how the pools identify and
    deal with a fork. Added a ChildDeadlockedError exception that is
    raised by child processes in the very unlikely chance that a deadlock
    is encountered. Thanks @gmbnomis, @mdellweg, @yht804421715. #1270,
    [#1138], #1178, #906, #1262
  * Added __eq__ hooks to the Redis and ConnectionPool classes.
    Thanks @brainix. #1240
- deleted patches
  - 0001-fix-tests-with-redis-pre-5.0.0.patch (upstreamed)</changelog>
</package>
<package pkgid="4253edf1493d29d1cad50b338cfd7420dbc40c09602ab03f90864c2053bb2651" name="python-tk" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="6c656a9328cc73d594c4a344da50472f74f6799cbe1f4034b56a9da82b3ded38" name="python-tk" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="1fb26b6015065a738d9b74b57b4ca13695895ad9b99e9ab90bee0d1e2bed214b" name="python-tk" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="6610dd9f0561b4d6114e07cb49241953fccd9072ec38da6cbee86a24471b121e" name="python-tk" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="dafde5dff7f92049e2eb901ecdab10031f6f90a057f3cf9b15693fe3c459a064" name="python-tk" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.4"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="3bf3ef4526ac328b095578eb3974e09ad07e3f0b186234f0fd82c04234bd5ef6" name="python-waitress" arch="src">
  <version epoch="0" ver="1.4.3" rel="3.3.1"/>
  <changelog author="speilicke@suse.com" date="1367496000">- Fix license string</changelog>
  <changelog author="dmueller@suse.com" date="1372161600">- update to 0.8.5:
  - Fix runner multisegment imports in some Python 2 revisions (see
  https://github.com/Pylons/waitress/pull/34).
  - For compatibility, WSGIServer is now an alias of TcpWSGIServer. The
  signature of BaseWSGIServer is now compatible with WSGIServer pre-0.8.4.
  - Add a command-line runner called ``waitress-serve`` to allow Waitress
  to run WSGI applications without any addional machinery. This is
  essentially a thin wrapper around the ``waitress.serve()`` function.
  - Allow parallel testing (e.g., under ``detox`` or ``nosetests --processes``)
  using PID-dependent port / socket for functest servers.
  - Fix integer overflow errors on large buffers. Thanks to Marcin Kuzminski
  for the patch.  See: https://github.com/Pylons/waitress/issues/22
  - Add support for listening on Unix domain sockets.</changelog>
  <changelog author="dmueller@suse.com" date="1376395200">- update to 0.8.6:
  - Do alternate type of checking for UNIX socket support, instead of checking
  for platform == windows.
  - Functional tests now use multiprocessing module instead of subprocess module,
  speeding up test suite and making concurrent execution more reliable.
  - Runner now appends the current working directory to ``sys.path`` to support
  running WSGI applications from a directory (i.e., not installed in a
  virtualenv).</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 0.8.7:
  - The HTTP version of the response returned by waitress when it catches an
  exception will now match the HTTP request version.
  - Fix: CONNECTION header will be HTTP_CONNECTION and not CONNECTION_TYPE
  (see https://github.com/Pylons/waitress/issues/13)</changelog>
  <changelog author="tbechtold@suse.com" date="1418385600">- update to 0.8.9:
  - Fix tests under Windows.  NB: to run tests under Windows, you cannot run
    "setup.py test" or "setup.py nosetests".  Instead you must run ``python.exe
  - c "import nose; nose.main()"``.  If you try to run the tests using the
    normal method under Windows, each subprocess created by the test suite will
    attempt to run the test suite again.  See
    https://github.com/nose-devs/nose/issues/407 for more information.
  - Give the WSGI app_iter generated when ``wsgi.file_wrapper`` is used
    (ReadOnlyFileBasedBuffer) a ``close`` method.  Do not call ``close`` on an
    instance of such a class when it's used as a WSGI app_iter, however.  This is
    part of a fix which prevents a leakage of file descriptors; the other part of
    the fix was in WebOb
    (https://github.com/Pylons/webob/commit/951a41ce57bd853947f842028bccb500bd5237da).
  - Allow trusted proxies to override ``wsgi.url_scheme`` via a request header,
    ``X_FORWARDED_PROTO``.  Allows proxies which serve mixed HTTP / HTTPS
    requests to control signal which are served as HTTPS.  See
    https://github.com/Pylons/waitress/pull/42.
  - Fix some cases where the creation of extremely large output buffers (greater
    than 2GB, suspected to be buffers added via ``wsgi.file_wrapper``) might
    cause an OverflowError on Python 2.  See
    https://github.com/Pylons/waitress/issues/47.
  - When the ``url_prefix`` adjustment starts with more than one slash, all
    slashes except one will be stripped from its beginning.  This differs from
    older behavior where more than one leading slash would be preserved in
    ``url_prefix``.
  - If a client somehow manages to send an empty path, we no longer convert the
    empty path to a single slash in ``PATH_INFO``.  Instead, the path remains
    empty.  According to RFC 2616 section "5.1.2 Request-URI", the scenario of a
    client sending an empty path is actually not possible because the request URI
    portion cannot be empty.
  - If the ``url_prefix`` adjustment matches the request path exactly, we now
    compute ``SCRIPT_NAME`` and ``PATH_INFO`` properly.  Previously, if the
    ``url_prefix`` was ``/foo`` and the path received from a client was ``/foo``,
    we would set *both* ``SCRIPT_NAME`` and ``PATH_INFO`` to ``/foo``.  This was
    incorrect.  Now in such a case we set ``PATH_INFO`` to the empty string and
    we set ``SCRIPT_NAME`` to ``/foo``.  Note that the change we made has no
    effect on paths that do not match the ``url_prefix`` exactly (such as
    ``/foo/bar``); these continue to operate as they did.  See
    https://github.com/Pylons/waitress/issues/46
  - Preserve header ordering of headers with the same name as per RFC 2616.  See
    https://github.com/Pylons/waitress/pull/44
  - When waitress receives a ``Transfer-Encoding: chunked`` request, we no longer
    send the ``TRANSFER_ENCODING`` nor the ``HTTP_TRANSFER_ENCODING`` value to
    the application in the environment.  Instead, we pop this header.  Since we
    cope with chunked requests by buffering the data in the server, we also know
    when a chunked request has ended, and therefore we know the content length.
    We set the content-length header in the environment, such that applications
    effectively never know the original request was a T-E: chunked request; it
    will appear to them as if the request is a non-chunked request with an
    accurate content-length.
  - Cope with the fact that the ``Transfer-Encoding`` value is case-insensitive.
  - When the ``--unix-socket-perms`` option was used as an argument to
    ``waitress-serve``, a ``TypeError`` would be raised.  See
    https://github.com/Pylons/waitress/issues/50.
- Enable testsuite during build</changelog>
  <changelog author="dmueller@suse.com" date="1463745600">- update to 0.9.0:
  * Security/Protections
  - Building on the changes made in pull request 117, add in checking for line
    feed/carriage return HTTP Response Splitting in the status line, as well as
    the key of a header. See https://github.com/Pylons/waitress/pull/124 and
    https://github.com/Pylons/waitress/issues/122.
  - Waitress will no longer accept headers or status lines with
    newline/carriage returns in them, thereby disallowing HTTP Response
    Splitting.
  * Bugfixes
  - FileBasedBuffer and more important ReadOnlyFileBasedBuffer no longer report
    False when tested with bool(), instead always returning True, and becoming
    more iterator like.
  - Call prune() on the output buffer at the end of a request so that it doesn't
    continue to grow without bounds.</changelog>
  <changelog author="tbechtold@suse.com" date="1479211200">- update to 1.0.1:
  - IPv6 support on Windows was broken due to missing constants in the socket
    module. This has been resolved by setting the constants on Windows if they
    are missing. See https://github.com/Pylons/waitress/issues/138
  - A ValueError was raised on Windows when passing a string for the port, on
    Windows in Python 2 using service names instead of port numbers doesn't work
    with `getaddrinfo`. This has been resolved by attempting to convert the port
    number to an integer, if that fails a ValueError will be raised. See
    https://github.com/Pylons/waitress/issues/139
  - Removed `AI_ADDRCONFIG` from the call to `getaddrinfo`, this resolves an
    issue whereby `getaddrinfo` wouldn't return any addresses to `bind` to on
    hosts where there is no internet connection but localhost is requested to be
    bound to. See https://github.com/Pylons/waitress/issues/131 for more
    information.
- disable tests. need network access.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493640000">- Update to 1.0.2
  * Python 3.6 is now officially supported in Waitress
  * Add a work-around for libc issue on Linux not following the
    documented standards. If getnameinfo() fails because of DNS not
    being available it should return the IP address instead of the
    reverse DNS entry, however instead getnameinfo() raises. We
    catch this, and ask getnameinfo() for the same information
    again, explicitly asking for IP address instead of reverse
    DNS hostname.
- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="arun@gmx.de" date="1507896000">- update to version 1.1.0:
  * Features
    + Waitress now has a __main__ and thus may be called with "python
  - mwaitress"
  * Bugfixes
    + Waitress no longer allows lowercase HTTP verbs. This change was
    made to fall in line with most HTTP servers. See
    https://github.com/Pylons/waitress/pull/170
    + When receiving non-ascii bytes in the request URL, waitress will
    no longer abruptly close the connection, instead returning a 400
    Bad Request. See https://github.com/Pylons/waitress/pull/162 and
    https://github.com/Pylons/waitress/issues/64</changelog>
  <changelog author="tserong@suse.com" date="1600948800">- update to 1.4.3 to include fixes for:
  * CVE-2019-16785 / bsc#1161088
  * CVE-2019-16786 / bsc#1161089
  * CVE-2019-16789 / bsc#1160790
  * CVE-2019-16792 / bsc#1161670</changelog>
</package>
<package pkgid="e4a575fa3753c94ccd1ad0b1fa0b7cf760f628f3ce9eb365b2d69663abbd3cd9" name="python-xml" arch="aarch64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="bdac5596aec0eaab002c35dc8fae25ab7bec2572713f1be4b8dcc6fb1bb761e9" name="python-xml" arch="i586">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="57ddef17e86b4682a56e3275651643584c8779db50f4f06023e08d10dd92a7d4" name="python-xml" arch="ppc64le">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="01fe0e2377578b7ca4362a8c8c5f12fcaddc600b77bcda52ad0a04d73b247dee" name="python-xml" arch="s390x">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="83043f81f6c63b084561668765faaee9d82dd073694c7ed84a91c2a514215fbd" name="python-xml" arch="x86_64">
  <version epoch="0" ver="2.7.17" rel="7.44.2"/>
  <changelog author="tchvatal@suse.com" date="1577966400">- Add provides in gdbm subpackage to provide dbm symbols. This
  allows us to use %%{python_module dbm} as a dependency and have
  it properly resolved for both python2 and python3</changelog>
  <changelog author="mcepl@suse.com" date="1578657600">- libnsl is required only on more recent SLEs and openSUSE, older
  glibc supported NIS on its own.</changelog>
  <changelog author="mcepl@suse.com" date="1580126400">- Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
  off tests coliding with the combination of modern Python and
  ancient OpenSSL on SLE-12.</changelog>
  <changelog author="tchvatal@suse.com" date="1580731200">- Provide python-testsuite from devel subkg to ease py2-&gt;py3
  dependencies</changelog>
  <changelog author="mcepl@suse.com" date="1580990400">- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
  "Python urrlib allowed an HTTP server to conduct Regular
  Expression Denial of Service (ReDoS)" (bsc#1162367)</changelog>
  <changelog author="mcepl@suse.com" date="1581163200">- Change to Requires: libpython%{so_version} == %{version}-%{release}
  to python-base to keep both packages always synchronized (add
  %{so_version}) (bsc#1162224).</changelog>
  <changelog author="mcepl@suse.com" date="1581163201">- Add CVE-2019-9674-zip-bomb.patch to improve documentation
  warning about dangers of zip-bombs and other security problems
  with zipfile library. (bsc#1162825 CVE-2019-9674)</changelog>
  <changelog author="mcepl@suse.com" date="1588334400">- Add CVE-2019-18348-CRLF_injection_via_host_part.patch to
  disallow control characters in hostnames in httplib,
  addressing CVE-2019-18348. Such potentially malicious header
  injection URLs now cause a InvalidURL to be raised.
  (bsc#1155094)</changelog>
  <changelog author="mcepl@suse.com" date="1595246400">- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
  (CVE-2019-20907, bpo#39017) avoiding possible infinite loop
  in specifically crafted tarball.
  Add recursion.tar as a testing tarball for the patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1603108800">- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
  (CVE-2020-26116, bpo#39603) no longer allowing special characters in
  the method parameter of HTTPConnection.putrequest in httplib, stopping
  injection of headers. Such characters now raise ValueError.</changelog>
</package>
<package pkgid="d20a8427c81fb45eb9b882f5acfda6b99c3f2c79bc3e4531addb1a6fdb2d88ca" name="python2-cheroot" arch="noarch">
  <version epoch="0" ver="5.4.0" rel="3.6.1"/>
  <changelog author="jmatejek@suse.com" date="1490961600">- initial commit</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1588852800">- Avoid possible race condition on persistent HTTP connections (bsc#1169604)
- Added:
  * 0001-Avoid-race-condition-on-persistent-HTTP-connections.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1603800000">- Ignore OpenSSL's 1.1+ Error 0 under any Python
  while wrapping a socket (bsc#1176988)
- Added:
  * 0002-Ignore-OpenSSL-1.1+-Error-0-under-any-Python-while-wrapping-a-socket.patch</changelog>
</package>
<package pkgid="682018908bcb218d444e93c49c91d2cf6cf940f032f8570b8458c1de3a2957df" name="python2-click-man" arch="noarch">
  <version epoch="0" ver="0.4.1" rel="5.3.2"/>
  <changelog author="sean.marlow@suse.com" date="1574683200">- Initial release. v0.3.0
- get-short-help.patch adds get_short_help_str function and
  supports older versions of python-click. get_short_help_str was
  added to Click in version &gt;= 7.0.0.
- Use pytest instead of nose for unit tests.</changelog>
  <changelog author="tchvatal@suse.com" date="1575547200">- Switch to github archive as the tests are not present on pypi
  version</changelog>
  <changelog author="mcalabkova@suse.com" date="1585656000">- Update to 0.4.1
  * Discover command if not in entry_points
- Reapplied patch get-short-help.patch
- No need to use upstream tarball, download PyPI tarball instead</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="200da403c791df62cc689dba21dfa28f57f51f0f10c8f28391ae02feb25ff99d" name="python2-crcmod" arch="aarch64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="aa7c8bfe5544241d24fdb16dc61c6c6cf1e413fb690b9944f5a02f5284c29122" name="python2-crcmod" arch="i586">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="963c5f6a7c38f5e66150455febff698506a11b3f6ad0683653fd53eb5fb91640" name="python2-crcmod" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="5e635de99e452201c4c4d8cea278f516b5cc7ee65d8e3b83f28bd05dcb24c05b" name="python2-crcmod" arch="s390x">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="f6099032ab6527c71358773bece415bfdd90e915fd02c86a3898f7be0205a37f" name="python2-crcmod" arch="x86_64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d00fa69110afd529acb9b69cbdcc6a464af05a14c155080390dd13030418fcf8" name="python2-docker" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="3.2.1"/>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
</package>
<package pkgid="16f29835503b5464deabd73048c7215217f6b7c8ad89350c56c3ad44d57c1ee3" name="python2-docker-pycreds" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="3.2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Add the description
- Remove the SLE11 case</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478260800">- relax test-requirements so that it builds on Factory</changelog>
  <changelog author="jengelh@inai.de" date="1478260801">- Summary/Description update</changelog>
  <changelog author="dmueller@suse.com" date="1487678400">- update fix-requirements.patch: drop flake8
- fix source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1501761600">- Implement single-spec version
- Remove fix-requirements.patch
  This is only needed for setup.py test, which doesn't actually
  run the tests anyway so isn't used.</changelog>
  <changelog author="arun@gmx.de" date="1519387200">- specfile:
  * update copyright year
  * add flake8 and pytest-cov to test requirements (according to setup.py)
- update to version 0.2.2:
  * Add support for docker-credential-pass
  * Add test-running Dockerfile
  * Update setup.py</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 0.2.3:
  * Various small cleanups and more CI integrations</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 0.3.0:
  * Allow overriding environment variables for credstore invocation</changelog>
  <changelog author="dmueller@suse.com" date="1539086400">- remove unused flake8 dependency</changelog>
  <changelog author="hvogel@opensuse.org" date="1547467200">- update to version 0.4.0:
  * Add support for store.list</changelog>
</package>
<package pkgid="db3c0a12db08e3be79666978fdb1f8ec9575f895dfc3a6b3098fb5e05336a3b8" name="python2-httplib2" arch="noarch">
  <version epoch="0" ver="0.19.0" rel="3.3.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="4fe215564574c280c854dcdb1b5f606d6f8c2698ff47e0165df29bae5d5e4417" name="python2-magic" arch="aarch64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="c464974c544e143d615b480e90f2bc78cd4f45fb4a0822ea46528039353b7e6a" name="python2-magic" arch="i586">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="2fb536f96885925d7db91d3a54496e9784ce3f5b11734ae6903fb5c2bbf26770" name="python2-magic" arch="ppc64le">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="03d2f8524e0d09a289f9b2dbd24a75a10e1536e853c693317e782fc117eef1f8" name="python2-magic" arch="s390x">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="b39134d9b93ad8b4c9cb8e6a55f154c02b62d1f36543c4082fad8be6dab18af3" name="python2-magic" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="ae1d219ca7ca930157b5fc55734b77225dad5fb4940a3e9af4fcb832b84ad572" name="python2-mock" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="5.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1437998400">- python-mock now requires python-pbr</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445860800">- BuildRequires python-funcsigs.  It was already in Requires,
  but is also needed at build time for unit tests.</changelog>
  <changelog author="frede@b1-systems.de" date="1452254400">- BuildRequires python-setuptools &gt;= 17.1 If you have a lower
  version the build will fail.</changelog>
  <changelog author="tbechtold@suse.com" date="1464868800">- update to 2.0.0:
  * Fix #338: depend on a fixed version of funcsigs
  * More 3.2 support dropping cleanup
  * Update sync point
  * Add Mock.assert_called()
  * Issue25347 - Format the error message output of mock's assert_has_calls method
  * Issue #22138: Fix mock.patch behavior when patching descriptors. Restore original values after patching
  * Issue #24857: Comparing call_args to a long sequence now correctly returns a boolean result instead of raising an exception
  * Issue #23004: mock_open() now reads binary data correctly when the type of read_data is bytes
  * Add version info in the docs
  * Update six to a version with raises_from
  * Fix #328 - handle unicode __repr__ on Python 2.x
  * Drop support for Python 3.2
  * Fix typo in docs/index.txt
  * Fix README.rst checking
  * Be clearer about Python version compat
  * Issue #295: use a setup_requires dependency
  * Improve grouping of imports in tests
  * Use six to detect python2/3 in main module
  * Use six to detect python2/3 in test modules
- adjust Requires
- use pypi.io as Source url</changelog>
  <changelog author="tbechtold@suse.com" date="1475755200">- Fix pytohn-funcsigs Requires</changelog>
  <changelog author="jmatejek@suse.com" date="1475755201">- update for multipython build
- remove test runner because it performs dark magic that
  causes a failure in test suite
- implement fallback to python's own unittest instead of unittest2
  if we're on Python 3 (to avoid dependencies on funcsigs and unittest2)
  (unittest2-fallback.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- adjust requires for singlespec'ified python-funcsigs</changelog>
  <changelog author="tchvatal@suse.com" date="1515067200">- Condition python2 build to ensure we can build py3 only package</changelog>
  <changelog author="mcepl@suse.com" date="1534161600">- Remove dependency on unittest2
  Add remove_unittest2.patch to facilitate that
  Remove unnecessary now unittest2-fallback.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1557835200">- update to 3.0.5
- drop remove_unittest2.patch
  * more in CHANGELOG.rst</changelog>
</package>
<package pkgid="78f44ec691b89b2c7607d14a412067e14d9bd0017fbe9f7494a5f5444b9e799f" name="python2-parallax" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="3.3.14"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Release 1.0.2
- Switch to new singlespec packaging</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Release 1.0.3
- Add to_ascii function to convert byte message to str (bsc#1066330)</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Release 1.0.4
- Fix super call for python2 (bsc#1099514)</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1544443200">- Fix Source URL
- Fix fdupes call</changelog>
  <changelog author="kgronlund@suse.com" date="1545134400">- Obsolete old python-parallax package (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1559044800">- Work around hidden python packaging magic (bsc#1131136)</changelog>
  <changelog author="kgronlund@suse.com" date="1566475200">- Release 1.0.5
- Surpress warning messages when needed (bsc#1146748)
- Fix assert_ DeprecationWarning</changelog>
  <changelog author="kgronlund@suse.com" date="1585742400">- Release 1.0.6
- Replace preexec_fn as start_new_session
- No need to mask signals for subprocess call</changelog>
  <changelog author="XLiang@suse.com" date="1589889600">- Add ssh_key option used by -i option of ssh and scp(bsc#1169581)
  Add patch 0001-Add-ssh_key-option-used-by-i-option-of-ssh-scp.patch</changelog>
</package>
<package pkgid="5cc348aae64fff736f2cf4baf68e89fe3ac4751d3191c42ff1630d26001f8dd0" name="python2-py" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="5.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="3d927d54df991bae68d82fe2de5d279cb8182b25a1b4b47e0023371bd10f789a" name="python2-redis" arch="noarch">
  <version epoch="0" ver="3.4.1" rel="3.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1542369600">- add recommendation for python-hiredis as requested by @mimi_vx in Request#649524</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Update to 3.1.0:
  * Connection URLs must have one of the following schemes:
    redis://, rediss://, unix://. Thanks @jdupl123. #961/#969
  * Fixed an issue with retry_on_timeout logic that caused some TimeoutErrors
    to be retried. Thanks Aaron Yang. #1022/#1023
  * Added support for SNI for SSL. Thanks @oridistor and Roey Prat. #1087
  * Fixed ConnectionPool repr for pools with no connections. Thanks
    Cody Scott. #1043/#995
  * Fixed GEOHASH to return a None value when specifying a place that
    doesn't exist on the server. Thanks @guybe7. #1126
  * Fixed XREADGROUP to return an empty dictionary for messages that
    have been deleted but still exist in the unacknowledged queue. Thanks
    @xeizmendi. #1116
  * Added an owned method to Lock objects. owned returns a boolean
    indicating whether the current lock instance still owns the lock.
    Thanks Dave Johansen. #1112
  * Allow lock.acquire() to accept an optional token argument. If
    provided, the token argument is used as the unique value used to claim
    the lock. Thankd Dave Johansen. #1112
  * Added a reacquire method to Lock objects. reaquire attempts to renew
    the lock such that the timeout is extended to the same value that the
    lock was initially acquired with. Thanks Ihor Kalnytskyi. #1014
  * Stream names found within XREAD and XREADGROUP responses now properly
    respect the decode_responses flag.
  * XPENDING_RANGE now requires the user the specify the min, max and
    count arguments. Newer versions of Redis prevent ount from being
    infinite so it's left to the user to specify these values explicitly.
  * ZADD now returns None when xx=True and incr=True and an element
    is specified that doesn't exist in the sorted set. This matches
    what the server returns in this case. #1084
  * Added client_kill_filter that accepts various filters to identify
    and kill clients. Thanks Theofanis Despoudis. #1098
  * Fixed a race condition that occurred when unsubscribing and
    resubscribing to the same channel or pattern in rapid succession.
    Thanks Marcin Raczy?ski. #764
  * Added a LockNotOwnedError that is raised when trying to extend or
    release a lock that is no longer owned. This is a subclass of LockError
    so previous code should continue to work as expected. Thanks Joshua
    Harlow. #1095
  * Fixed a bug in GEORADIUS that forced decoding of places without
    respecting the decode_responses option. Thanks Bo Bayles. #1082
- Drop no longer needed redis-skip-rounding.patch</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1550491200">- Update to 3.2.0 bsc#1131555:
  * Added support for `select.poll` to test whether data can be read
    on a socket. This should allow for significantly more connections to
    be used with pubsub. Fixes #486/#1115
  * Attempt to guarentee that the ConnectionPool hands out healthy
    connections. Healthy connections are those that have an established
    socket connection to the Redis server, are ready to accept a command
    and have no data available to read. Fixes #1127/#886
  * Use the socket.IPPROTO_TCP constant instead of socket.SOL_TCP.
    IPPROTO_TCP is available on more interpreters (Jython for instance).
    Thanks @Junnplus. #1130
  * Fixed a regression introduced in 3.0 that mishandles exceptions not
    derived from the base Exception class. KeyboardInterrupt and
    gevent.timeout notable. Thanks Christian Fersch. #1128/#1129
  * Significant improvements to handing connections with forked processes.
    Parent and child processes no longer trample on each others' connections.
    Thanks to Jay Rolette for the patch and highlighting this issue.
    [#504]/#732/#784/#863
  * PythonParser no longer closes the associated connection's socket. The
    connection itself will close the socket. #1108/#1085</changelog>
  <changelog author="jayvdb@gmail.com" date="1553601600">- Update to v3.2.1
  * Fix SentinelConnectionPool to work in multiprocess/forked
    environments</changelog>
  <changelog author="jayvdb@gmail.com" date="1554033600">- Add missing build dependency setuptools</changelog>
  <changelog author="mcalabkova@suse.com" date="1565611200">- Update to v3.3.6
  * Resolve a race condition with the PubSubWorkerThread. #1150
  * Response callbacks are now case insensitive.
  * Added support for hiredis-py 1.0.0 encoding error support.
  * Add READONLY and READWRITE commands.
  * Added extensive health checks that keep the connections lively.
  * Many more changes, see upstream changelog.</changelog>
  <changelog author="tchvatal@suse.com" date="1568116800">- Update to 3.3.8:
  * Fixed MONITOR parsing to properly parse IPv6 client addresses
  * Fixed a regression introduced in 3.3.0</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * be more specifc in %files section
- update to version 3.3.11:
  * Further fix for the SSLError -&gt; TimeoutError mapping to work on
    obscure releases of Python 2.7.
- changes from version 3.3.10:
  * Fixed a potential error handling bug for the SSLError -&gt;
    TimeoutError mapping introduced in 3.3.9. hanks @zbristow. #1224
- changes from version 3.3.9:
  * Mapped Python 2.7 SSLError to TimeoutError where
    appropriate. Timeouts should now consistently raise TimeoutErrors
    on Python 2.7 for both unsecured and secured connections. Thanks
    @zbristow. #1222</changelog>
  <changelog author="buschmann23@opensuse.org" date="1576238400">- Fix tests with redis pre 5.0.0:
  * 0001-fix-tests-with-redis-pre-5.0.0.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584619200">- version update to 3.4.1
  * 3.4.1
  * Move the username argument in the Redis and Connection classes to the
    end of the argument list. This helps those poor souls that specify all
    their connection options as non-keyword arguments. #1276
  * Prior to ACL support, redis-py ignored the username component of
    Connection URLs. With ACL support, usernames are no longer ignored and
    are used to authenticate against an ACL rule. Some cloud vendors with
    managed Redis instances (like Heroku) provide connection URLs with a
    username component pre-ACL that is not intended to be used. Sending that
    username to Redis servers &lt; 6.0.0 results in an error. Attempt to detect
    this condition and retry the AUTH command with only the password such
    that authentication continues to work for these users. #1274
  * Removed the __eq__ hooks to Redis and ConnectionPool that were added
    in 3.4.0. This ended up being a bad idea as two separate connection
    pools be considered equal yet manage a completely separate set of
    connections.
  * 3.4.0
  * Allow empty pipelines to be executed if there are WATCHed keys.
    This is a convenient way to test if any of the watched keys changed
    without actually running any other commands. Thanks @brianmaissy.
    [#1233], #1234
  * Removed support for end of life Python 3.4.
  * Added support for all ACL commands in Redis 6. Thanks @IAmATeaPot418
    for helping.
  * Pipeline instances now always evaluate to True. Prior to this change,
    pipeline instances relied on __len__ for boolean evaluation which
    meant that pipelines with no commands on the stack would be considered
    False. #994
  * Client instances and Connection pools now support a 'client_name'
    argument. If supplied, all connections created will call CLIENT SETNAME
    as soon as the connection is opened. Thanks to @Habbie for supplying
    the basis of this change. #802
  * Added the 'ssl_check_hostname' argument to specify whether SSL
    connections should require the server hostname to match the hostname
    specified in the SSL cert. By default 'ssl_check_hostname' is False
    for backwards compatibility. #1196
  * Slightly optimized command packing. Thanks @Deneby67. #1255
  * Added support for the TYPE argument to SCAN. Thanks @netocp. #1220
  * Better thread and fork safety in ConnectionPool and
    BlockingConnectionPool. Added better locking to synchronize critical
    sections rather than relying on CPython-specific implementation details
    relating to atomic operations. Adjusted how the pools identify and
    deal with a fork. Added a ChildDeadlockedError exception that is
    raised by child processes in the very unlikely chance that a deadlock
    is encountered. Thanks @gmbnomis, @mdellweg, @yht804421715. #1270,
    [#1138], #1178, #906, #1262
  * Added __eq__ hooks to the Redis and ConnectionPool classes.
    Thanks @brainix. #1240
- deleted patches
  - 0001-fix-tests-with-redis-pre-5.0.0.patch (upstreamed)</changelog>
</package>
<package pkgid="71a38fcc644a1d5c0460dcfcdf5251577dd24f15a5bece72536f7dbaff1f0654" name="python2-salt" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="97da8c5d93b32d72977980fe6d3a2f6b400eaa2e5467e3d203382a68e7520955" name="python2-salt" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="deff314c7b33e44048340504eacf9d32ef24f570ec1d47923088b92b734c3a7d" name="python2-salt" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="962e6fc055c35c50ee2410b1e45b54fdafe03c2db5b574b96d2424e1f5f69334" name="python2-salt" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="19946c9e6380ff6f6bb12fb83089a11ca82da1b72c2622aa664a4a5e5b261a68" name="python2-salt" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="a7b8a0679146f0fb33d357e435c1e77890c7229344b318b8cc9409dc5c09a37a" name="python2-spacewalk-check" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="126987c0eface1eb085c2b93679f7187e34c52af14896e07e7f3256a6bc9394e" name="python2-spacewalk-client-setup" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="f77079e112dabe5398b3b822edde62498d30b3b021292982ea51bcebcb21b1a9" name="python2-spacewalk-client-tools" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="70d67f02d0a37847ba586d8521c9878d9016f4fd04ec421a5c4ad2832218758a" name="python2-virt-bootstrap" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="5.3.124"/>
  <changelog author="cbosdonnat@suse.com" date="1504785600">- Release 1.0.0 (fate#321985)</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- excludearch for i586 and s390 (bsc#1085644)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1562673600">- Allow providing the container's root password using a file.
  bsc#1140750, CVE-2019-13314
  added patch:
    5cdf0c9c-Don-t-expose-the-root_password-via-command-line.patch</changelog>
</package>
<package pkgid="93023e96d94a416e56bdf88691f07a0204babf8c9c236b4e906aa097ad80d77f" name="python2-waitress" arch="noarch">
  <version epoch="0" ver="1.4.3" rel="3.3.1"/>
  <changelog author="speilicke@suse.com" date="1367496000">- Fix license string</changelog>
  <changelog author="dmueller@suse.com" date="1372161600">- update to 0.8.5:
  - Fix runner multisegment imports in some Python 2 revisions (see
  https://github.com/Pylons/waitress/pull/34).
  - For compatibility, WSGIServer is now an alias of TcpWSGIServer. The
  signature of BaseWSGIServer is now compatible with WSGIServer pre-0.8.4.
  - Add a command-line runner called ``waitress-serve`` to allow Waitress
  to run WSGI applications without any addional machinery. This is
  essentially a thin wrapper around the ``waitress.serve()`` function.
  - Allow parallel testing (e.g., under ``detox`` or ``nosetests --processes``)
  using PID-dependent port / socket for functest servers.
  - Fix integer overflow errors on large buffers. Thanks to Marcin Kuzminski
  for the patch.  See: https://github.com/Pylons/waitress/issues/22
  - Add support for listening on Unix domain sockets.</changelog>
  <changelog author="dmueller@suse.com" date="1376395200">- update to 0.8.6:
  - Do alternate type of checking for UNIX socket support, instead of checking
  for platform == windows.
  - Functional tests now use multiprocessing module instead of subprocess module,
  speeding up test suite and making concurrent execution more reliable.
  - Runner now appends the current working directory to ``sys.path`` to support
  running WSGI applications from a directory (i.e., not installed in a
  virtualenv).</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 0.8.7:
  - The HTTP version of the response returned by waitress when it catches an
  exception will now match the HTTP request version.
  - Fix: CONNECTION header will be HTTP_CONNECTION and not CONNECTION_TYPE
  (see https://github.com/Pylons/waitress/issues/13)</changelog>
  <changelog author="tbechtold@suse.com" date="1418385600">- update to 0.8.9:
  - Fix tests under Windows.  NB: to run tests under Windows, you cannot run
    "setup.py test" or "setup.py nosetests".  Instead you must run ``python.exe
  - c "import nose; nose.main()"``.  If you try to run the tests using the
    normal method under Windows, each subprocess created by the test suite will
    attempt to run the test suite again.  See
    https://github.com/nose-devs/nose/issues/407 for more information.
  - Give the WSGI app_iter generated when ``wsgi.file_wrapper`` is used
    (ReadOnlyFileBasedBuffer) a ``close`` method.  Do not call ``close`` on an
    instance of such a class when it's used as a WSGI app_iter, however.  This is
    part of a fix which prevents a leakage of file descriptors; the other part of
    the fix was in WebOb
    (https://github.com/Pylons/webob/commit/951a41ce57bd853947f842028bccb500bd5237da).
  - Allow trusted proxies to override ``wsgi.url_scheme`` via a request header,
    ``X_FORWARDED_PROTO``.  Allows proxies which serve mixed HTTP / HTTPS
    requests to control signal which are served as HTTPS.  See
    https://github.com/Pylons/waitress/pull/42.
  - Fix some cases where the creation of extremely large output buffers (greater
    than 2GB, suspected to be buffers added via ``wsgi.file_wrapper``) might
    cause an OverflowError on Python 2.  See
    https://github.com/Pylons/waitress/issues/47.
  - When the ``url_prefix`` adjustment starts with more than one slash, all
    slashes except one will be stripped from its beginning.  This differs from
    older behavior where more than one leading slash would be preserved in
    ``url_prefix``.
  - If a client somehow manages to send an empty path, we no longer convert the
    empty path to a single slash in ``PATH_INFO``.  Instead, the path remains
    empty.  According to RFC 2616 section "5.1.2 Request-URI", the scenario of a
    client sending an empty path is actually not possible because the request URI
    portion cannot be empty.
  - If the ``url_prefix`` adjustment matches the request path exactly, we now
    compute ``SCRIPT_NAME`` and ``PATH_INFO`` properly.  Previously, if the
    ``url_prefix`` was ``/foo`` and the path received from a client was ``/foo``,
    we would set *both* ``SCRIPT_NAME`` and ``PATH_INFO`` to ``/foo``.  This was
    incorrect.  Now in such a case we set ``PATH_INFO`` to the empty string and
    we set ``SCRIPT_NAME`` to ``/foo``.  Note that the change we made has no
    effect on paths that do not match the ``url_prefix`` exactly (such as
    ``/foo/bar``); these continue to operate as they did.  See
    https://github.com/Pylons/waitress/issues/46
  - Preserve header ordering of headers with the same name as per RFC 2616.  See
    https://github.com/Pylons/waitress/pull/44
  - When waitress receives a ``Transfer-Encoding: chunked`` request, we no longer
    send the ``TRANSFER_ENCODING`` nor the ``HTTP_TRANSFER_ENCODING`` value to
    the application in the environment.  Instead, we pop this header.  Since we
    cope with chunked requests by buffering the data in the server, we also know
    when a chunked request has ended, and therefore we know the content length.
    We set the content-length header in the environment, such that applications
    effectively never know the original request was a T-E: chunked request; it
    will appear to them as if the request is a non-chunked request with an
    accurate content-length.
  - Cope with the fact that the ``Transfer-Encoding`` value is case-insensitive.
  - When the ``--unix-socket-perms`` option was used as an argument to
    ``waitress-serve``, a ``TypeError`` would be raised.  See
    https://github.com/Pylons/waitress/issues/50.
- Enable testsuite during build</changelog>
  <changelog author="dmueller@suse.com" date="1463745600">- update to 0.9.0:
  * Security/Protections
  - Building on the changes made in pull request 117, add in checking for line
    feed/carriage return HTTP Response Splitting in the status line, as well as
    the key of a header. See https://github.com/Pylons/waitress/pull/124 and
    https://github.com/Pylons/waitress/issues/122.
  - Waitress will no longer accept headers or status lines with
    newline/carriage returns in them, thereby disallowing HTTP Response
    Splitting.
  * Bugfixes
  - FileBasedBuffer and more important ReadOnlyFileBasedBuffer no longer report
    False when tested with bool(), instead always returning True, and becoming
    more iterator like.
  - Call prune() on the output buffer at the end of a request so that it doesn't
    continue to grow without bounds.</changelog>
  <changelog author="tbechtold@suse.com" date="1479211200">- update to 1.0.1:
  - IPv6 support on Windows was broken due to missing constants in the socket
    module. This has been resolved by setting the constants on Windows if they
    are missing. See https://github.com/Pylons/waitress/issues/138
  - A ValueError was raised on Windows when passing a string for the port, on
    Windows in Python 2 using service names instead of port numbers doesn't work
    with `getaddrinfo`. This has been resolved by attempting to convert the port
    number to an integer, if that fails a ValueError will be raised. See
    https://github.com/Pylons/waitress/issues/139
  - Removed `AI_ADDRCONFIG` from the call to `getaddrinfo`, this resolves an
    issue whereby `getaddrinfo` wouldn't return any addresses to `bind` to on
    hosts where there is no internet connection but localhost is requested to be
    bound to. See https://github.com/Pylons/waitress/issues/131 for more
    information.
- disable tests. need network access.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493640000">- Update to 1.0.2
  * Python 3.6 is now officially supported in Waitress
  * Add a work-around for libc issue on Linux not following the
    documented standards. If getnameinfo() fails because of DNS not
    being available it should return the IP address instead of the
    reverse DNS entry, however instead getnameinfo() raises. We
    catch this, and ask getnameinfo() for the same information
    again, explicitly asking for IP address instead of reverse
    DNS hostname.
- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="arun@gmx.de" date="1507896000">- update to version 1.1.0:
  * Features
    + Waitress now has a __main__ and thus may be called with "python
  - mwaitress"
  * Bugfixes
    + Waitress no longer allows lowercase HTTP verbs. This change was
    made to fall in line with most HTTP servers. See
    https://github.com/Pylons/waitress/pull/170
    + When receiving non-ascii bytes in the request URL, waitress will
    no longer abruptly close the connection, instead returning a 400
    Bad Request. See https://github.com/Pylons/waitress/pull/162 and
    https://github.com/Pylons/waitress/issues/64</changelog>
  <changelog author="tserong@suse.com" date="1600948800">- update to 1.4.3 to include fixes for:
  * CVE-2019-16785 / bsc#1161088
  * CVE-2019-16786 / bsc#1161089
  * CVE-2019-16789 / bsc#1160790
  * CVE-2019-16792 / bsc#1161670</changelog>
</package>
<package pkgid="33507da276ff153cacc3cff9b9180a4056d35add0e8ac5e4b8ced92340768210" name="python3-aliyun-img-utils" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="6231e746b70c5c88448fc45f73533f60a2432175a14bee91ba3a5345a1cbd619" name="python3-aliyun-img-utils" arch="i586">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="3b3c1c3dbf44c841ef8bd76a1cf434e6239f6ec8b4c1b6338e954fb3e22d4242" name="python3-aliyun-img-utils" arch="ppc64le">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="1336482c83ff2ad53e36769588a3b5b86fbc869d768afadadd75925753273864" name="python3-aliyun-img-utils" arch="s390x">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d8e4e4574ee94c5cd44fa8f9fd32195c39afe1640a23c64c58f40bfce0967337" name="python3-aliyun-img-utils" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="26710ae4e9dfcd5022064b1e8e6a134b2c0df3087b31930a7d9c0aba87c739eb" name="python3-bind" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="12.32.1"/>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="96bf4e4d8e8c85ed1c20031ed65dd77198b036c50a9b8eacaa392cc897146c67" name="python3-bind" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="12.35.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="b084cea4c509317bd0e201f2bfdccd0e018c27afe2f83316a7867479abf68628" name="python3-bind" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="274b69a3ff70c7beeb9fc98ac18b8e0eda9a5fabe7755b964e304f16a36770a7" name="python3-ceph-argparse" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a3bc7cf8fcb0ae99d60fb764b24eef893ad9338772853d795185a8c987c85f7" name="python3-ceph-argparse" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="935e4d2af79d7ed31b7cd4274733635addef92994731e639cc31f7745b8e166b" name="python3-ceph-argparse" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="35bcb15733183f6a6942d10e59b407e552bdc6fe0ca65ffa7926859c906b9823" name="python3-ceph-argparse" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="930a98fd6a46943a2bfe0bed32827ce5d24f43565aa82eeb06dbba1018ac28f3" name="python3-ceph-argparse" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9e8477dbd1afe849ccc13fdf731fa1cf020598cff07e37d5d3e41a9f50359fc3" name="python3-ceph-argparse" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="939cd95087b5730dbc31af287ef1f3b1c28ec3f202a929d0270cd9027641f5cb" name="python3-ceph-argparse" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3557fbdb9cb0451153ac8e9aba198d0dec44c57ba9d855e317fcaa5dd4bc4241" name="python3-ceph-argparse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="48a2b45448813cfd0adcea85d192fb1708c02e5d8dd13b95b402a80522297e43" name="python3-ceph-common" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0aef6838700e1653a3a92db3e88708597818d78bd42a8842a49645ca75bdb0d2" name="python3-ceph-common" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2cb5943e6270a86b1eaf687ac5b5d651b6c97e48f45dfbb959d8d3a732d154b7" name="python3-ceph-common" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="42d4519531e82dc00614c44072f444317126499c6c72269bc858f825c1e1162e" name="python3-ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bc3288e66d2fb8839692a553a779814983fe82c10c19305e43c1feccf0b4e66b" name="python3-cephfs" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2e4f4a2d5bbab845d67e090225f75fb1f9894199a0789057709817ebc8305c09" name="python3-cephfs" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4851c6f763ac38d2ad727b4cdd26381a1907294e08346ff6bd9b34401cad5dce" name="python3-cephfs" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="613ed0d03376a9ed46a83aa9b2c2ad650d4a1083f01c6366039a7d633a2b2f52" name="python3-cephfs" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ef18361125d06c86da3e1c393e512745f2267f43e7aa19dd5148127d4ada8dbd" name="python3-cephfs" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="38f3aac2c04b443909f602e38cbf23f6b84e553d09fbadd791080b07e46789da" name="python3-cephfs" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="08f367662d39715d0ad3ca77e5c7399ecc55c195df1c5c4c8a3bf68782794d49" name="python3-cephfs" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5458f12e79e2f839bc15542401c45d6df288e1430189ecc3dd397434597cb341" name="python3-cephfs" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="494e25cf03e24cb8a7c883276fab4993a1107e933f0938c5893fb959897339c4" name="python3-cheroot" arch="noarch">
  <version epoch="0" ver="5.4.0" rel="3.6.1"/>
  <changelog author="jmatejek@suse.com" date="1490961600">- initial commit</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1588852800">- Avoid possible race condition on persistent HTTP connections (bsc#1169604)
- Added:
  * 0001-Avoid-race-condition-on-persistent-HTTP-connections.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1603800000">- Ignore OpenSSL's 1.1+ Error 0 under any Python
  while wrapping a socket (bsc#1176988)
- Added:
  * 0002-Ignore-OpenSSL-1.1+-Error-0-under-any-Python-while-wrapping-a-socket.patch</changelog>
</package>
<package pkgid="c90575afd64b88e767f9bb1e0581f5b0192c31b749d590a8d8dffe780d33e96f" name="python3-click-man" arch="noarch">
  <version epoch="0" ver="0.4.1" rel="5.3.2"/>
  <changelog author="sean.marlow@suse.com" date="1574683200">- Initial release. v0.3.0
- get-short-help.patch adds get_short_help_str function and
  supports older versions of python-click. get_short_help_str was
  added to Click in version &gt;= 7.0.0.
- Use pytest instead of nose for unit tests.</changelog>
  <changelog author="tchvatal@suse.com" date="1575547200">- Switch to github archive as the tests are not present on pypi
  version</changelog>
  <changelog author="mcalabkova@suse.com" date="1585656000">- Update to 0.4.1
  * Discover command if not in entry_points
- Reapplied patch get-short-help.patch
- No need to use upstream tarball, download PyPI tarball instead</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="4eda4e48284b4591635584791b867bc8a77a0975212171d0f9c95335de1b09ea" name="python3-crcmod" arch="aarch64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d2901cfde919f16866ae99d8e231f125b66251c5271cc08ea1852abe59c3673b" name="python3-crcmod" arch="i586">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="e904fbca2387864b2d421e0b39706600ba450cfa2ce3ffb9c1a0c49dc1c671f6" name="python3-crcmod" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d4aeeb77fc65fd28452129e9522a9afedb59fc9403c8d8a49258788ab63c774d" name="python3-crcmod" arch="s390x">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="969f0c4c977a9cd6bfdf9fb6dedd625f2630a315fa149d099374f0fa03734785" name="python3-crcmod" arch="x86_64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="197d0f1da1da16c44691f866c93ffc04f1c2c031e4219057b655b21f7bc299e4" name="python3-docker" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="3.2.1"/>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
</package>
<package pkgid="27e49a8640652895de3b57b0773b2e7f3314e91d05bc0c0296cd5122943fd163" name="python3-docker-pycreds" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="3.2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Add the description
- Remove the SLE11 case</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478260800">- relax test-requirements so that it builds on Factory</changelog>
  <changelog author="jengelh@inai.de" date="1478260801">- Summary/Description update</changelog>
  <changelog author="dmueller@suse.com" date="1487678400">- update fix-requirements.patch: drop flake8
- fix source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1501761600">- Implement single-spec version
- Remove fix-requirements.patch
  This is only needed for setup.py test, which doesn't actually
  run the tests anyway so isn't used.</changelog>
  <changelog author="arun@gmx.de" date="1519387200">- specfile:
  * update copyright year
  * add flake8 and pytest-cov to test requirements (according to setup.py)
- update to version 0.2.2:
  * Add support for docker-credential-pass
  * Add test-running Dockerfile
  * Update setup.py</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 0.2.3:
  * Various small cleanups and more CI integrations</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 0.3.0:
  * Allow overriding environment variables for credstore invocation</changelog>
  <changelog author="dmueller@suse.com" date="1539086400">- remove unused flake8 dependency</changelog>
  <changelog author="hvogel@opensuse.org" date="1547467200">- update to version 0.4.0:
  * Add support for store.list</changelog>
</package>
<package pkgid="59139916aa77e5e84cfb6602f9ff334d4a259e73c978090866f5a58956d728f2" name="python3-httplib2" arch="noarch">
  <version epoch="0" ver="0.19.0" rel="3.3.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="ba9b75cc19095fc7437e29cd56828fd5cc80cb0098a522ee2313e9113210fca7" name="python3-ipa_hbac" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="933e8e4fc280184f0591b3b5618a420dff0a475fb4be0a1cb2b700a3f4587f27" name="python3-ipa_hbac" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="ec01c6541a2ad6cf57d61fc0708894c1688ba413ba2c34ff2b57545c078d6a8a" name="python3-ipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="5ad5c822469b24993b01f667c336fcce10ed8127e177a3f8dacb56395558a0af" name="python3-ipa_hbac" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="00f2cd9b89611a04605480867fa9a5beb8eccaa8164e76e67796239d790c68ed" name="python3-ipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="edb47f1dbcad6dcf2447bf47cc4f86267abe2b5ef22157e39d121455440122ff" name="python3-kiwi" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="454e1f3b8f7ab7a9b65c62bce40cf9ef166c38f094e60d76b5aa6f20eaac2dc3" name="python3-kiwi" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="bafa16975c6dbd6e054eceebc1f541324ac60bfe6939def3c9e371fdd1e490b1" name="python3-kiwi" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a9acd2b6ff09c754506c4204d13c95484797db4294c30088f527dda556edd965" name="python3-kiwi" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5905a6ae63c6024b441ec59ddd3b98a0e8a86a54b49b2b30adb9374315f86d8b" name="python3-kiwi" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="292790cd0c2fc874b7c296a9dd42403f7789d1451e1efc05b213169e72c158b7" name="python3-libproxy" arch="noarch">
  <version epoch="0" ver="0.4.15" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1469188800">- Add libproxy-gnome-waitpid.patch: GNOME3: Wait for pxgsettings to
  vanish while destroying the plugin (boo#967601).</changelog>
  <changelog author="dimstar@opensuse.org" date="1470657600">- Add libproxy-python3-support.patch: Allow to build PYTHON2 and
  PYTHON3 bindings during the same build phase.
- Create new subpackage python3-libproxy.
- Add python3-devel BuildRequires when not building core.</changelog>
  <changelog author="dimstar@opensuse.org" date="1475150400">- Add libproxy-FindMono-4.6.patch: Fall back to mcs if gmcs cannot
  be found. Fixes issues with mono 4.6, which no longer ships the
  wrapper by default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479816000">- Add libproxy-cmake-3.7.patch: Fix build with cmake 3.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1483963200">- Update to version 0.4.14:
  + Parallel build support for python2 and python3.
  - DWITH_PYTHON has been replaced with -DWITH_PYTHON2 and
  - DWITH_PYTHON3 to have full control over this. Default is
    ON for both (gh#libproxy/libproxy#22).
  + Minor fixes to the PAC retriever code
    (gh#libproxy/libproxy#40).
  + Fallback to mcs instead of gmcs for the mono bindings
    (gh#libproxy/libproxy#37).
  + Fix build using cmake 3.7.
  + Fix deprecation warnings of pxgsettings with glib 2.46.
  + Improve the get-pac test suite (gh#libproxy/libproxy#47).
- Drop update-from-svn.sh: The script has not been usable for
  years, since libproxy is no longer hosted in this svn repo.
- Drop upstream merged patches:
  + libproxy-cmake-3.7.patch
  + libproxy-FindMono-4.6.patch
  + libproxy-gnome-waitpid.patch
  + libproxy-python3-support.patch
- Re-enable the test suite: with the upstream changes this should
  now be more reliable.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Have libproxy1-config-kde require libqt5-qtpaths instead of
  libqt5-qttools on openSUSE &gt; 13.2 / openSUSE &gt; Leap 42.x
  (boo#988808).</changelog>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="f792b9ae31689bf5d750d002cc913106948ac31a7df2bc175b102985eb625db9" name="python3-libstoragemgmt" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="2882cd0bd695175ce92ddb3336a2f649169627257b967d22b27281f25c30b9ca" name="python3-libstoragemgmt-clibs" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="d375355c4cefeed41a10af078c11006a3d261faae16d7c95522a17c0833024a0" name="python3-libstoragemgmt-clibs" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="9a4d9d29fbdff28b713c206d6456d4c10dd162c9f5157de3d1066b8f0fe494bd" name="python3-libstoragemgmt-clibs" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="1a906b10e0831a197f95bae3a93ddd6d2307f5054531893a4da81b0baa769989" name="python3-libstoragemgmt-clibs" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5fec307ec8f5cd73b243d44cee0d0546046d17d99d59a0eb3c8762b6f2a66d8d" name="python3-libstoragemgmt-clibs" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="e42fb437c7740c85de602bc6a702ce6c57edf8d949e9e287c96b433ac9e08ef7" name="python3-magic" arch="aarch64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="ce965ca545f63b84742599f9c57f228ab6cb86e301ac0292caacbc20614e124b" name="python3-magic" arch="i586">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="e749dd0c12ac45167eb611788822092de312ac7bcca39dc5f4644c7999cd8eb6" name="python3-magic" arch="ppc64le">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="6ee3df33e078e428e6182157b5ec6c582b9a71f83fa7812f849969d436e5374a" name="python3-magic" arch="s390x">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="4739d69e3450b0f7f4646a82f5035e7e3c04ce8606b88ce113e5fd024f9b9a7e" name="python3-magic" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.11.2"/>
  <changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
  <changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>
  <changelog author="werner@suse.de" date="1434024000">- adapt version in specfile to 5.23</changelog>
  <changelog author="werner@suse.de" date="1436875200">- adapt version in specfile to 5.24</changelog>
  <changelog author="astieger@suse.com" date="1443960000">- file 5.25:
  * add a limit to the length of regex searches
  * fix problems with --parameter</changelog>
  <changelog author="dmueller@suse.com" date="1453377600">- add file-5.25-avoid-double-evaluation-in-python-bindings.dif (bsc#949905)</changelog>
  <changelog author="rolf@rotkraut.de" date="1455624000">- Make the python command a macro.
- Remove %py_requires.
- Add dependency on libmagic.</changelog>
  <changelog author="werner@suse.de" date="1460980800">- Now it's file 5.26</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add Build Require python-setuptools</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- converted to singlespec, dropped separate python3-magic spec file
- moved python build instructions from file.spec to python-magic.spec
- do not need to build the binary parts in order to build the python part
- removed inlining of %defines from file.spec because it is unreliable
  in presence of parametrized macros
- added provides: python-file-magic to comply with the python package
  naming policy</changelog>
</package>
<package pkgid="d828dd9e58048f661c0715aa64b427538e76d6c87edee978311e9330699000f2" name="python3-mock" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="5.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1437998400">- python-mock now requires python-pbr</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445860800">- BuildRequires python-funcsigs.  It was already in Requires,
  but is also needed at build time for unit tests.</changelog>
  <changelog author="frede@b1-systems.de" date="1452254400">- BuildRequires python-setuptools &gt;= 17.1 If you have a lower
  version the build will fail.</changelog>
  <changelog author="tbechtold@suse.com" date="1464868800">- update to 2.0.0:
  * Fix #338: depend on a fixed version of funcsigs
  * More 3.2 support dropping cleanup
  * Update sync point
  * Add Mock.assert_called()
  * Issue25347 - Format the error message output of mock's assert_has_calls method
  * Issue #22138: Fix mock.patch behavior when patching descriptors. Restore original values after patching
  * Issue #24857: Comparing call_args to a long sequence now correctly returns a boolean result instead of raising an exception
  * Issue #23004: mock_open() now reads binary data correctly when the type of read_data is bytes
  * Add version info in the docs
  * Update six to a version with raises_from
  * Fix #328 - handle unicode __repr__ on Python 2.x
  * Drop support for Python 3.2
  * Fix typo in docs/index.txt
  * Fix README.rst checking
  * Be clearer about Python version compat
  * Issue #295: use a setup_requires dependency
  * Improve grouping of imports in tests
  * Use six to detect python2/3 in main module
  * Use six to detect python2/3 in test modules
- adjust Requires
- use pypi.io as Source url</changelog>
  <changelog author="tbechtold@suse.com" date="1475755200">- Fix pytohn-funcsigs Requires</changelog>
  <changelog author="jmatejek@suse.com" date="1475755201">- update for multipython build
- remove test runner because it performs dark magic that
  causes a failure in test suite
- implement fallback to python's own unittest instead of unittest2
  if we're on Python 3 (to avoid dependencies on funcsigs and unittest2)
  (unittest2-fallback.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- adjust requires for singlespec'ified python-funcsigs</changelog>
  <changelog author="tchvatal@suse.com" date="1515067200">- Condition python2 build to ensure we can build py3 only package</changelog>
  <changelog author="mcepl@suse.com" date="1534161600">- Remove dependency on unittest2
  Add remove_unittest2.patch to facilitate that
  Remove unnecessary now unittest2-fallback.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1557835200">- update to 3.0.5
- drop remove_unittest2.patch
  * more in CHANGELOG.rst</changelog>
</package>
<package pkgid="fda7ae867da2f3b0ebab4504bf21bdfcacc7ba8e493f9142e155586ce6feb6ac" name="python3-oss2" arch="noarch">
  <version epoch="0" ver="2.14.0" rel="5.3.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1617883200">- Initial build
  + Version 2.14.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="0aca715cf81f2c8c5a6746fa3bd288019ce73139c4346ca4994933a181589910" name="python3-parallax" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="3.3.14"/>
  <changelog author="kgronlund@suse.com" date="1503921600">- Release 1.0.2
- Switch to new singlespec packaging</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Release 1.0.3
- Add to_ascii function to convert byte message to str (bsc#1066330)</changelog>
  <changelog author="kgronlund@suse.com" date="1530187200">- Release 1.0.4
- Fix super call for python2 (bsc#1099514)</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1544443200">- Fix Source URL
- Fix fdupes call</changelog>
  <changelog author="kgronlund@suse.com" date="1545134400">- Obsolete old python-parallax package (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1559044800">- Work around hidden python packaging magic (bsc#1131136)</changelog>
  <changelog author="kgronlund@suse.com" date="1566475200">- Release 1.0.5
- Surpress warning messages when needed (bsc#1146748)
- Fix assert_ DeprecationWarning</changelog>
  <changelog author="kgronlund@suse.com" date="1585742400">- Release 1.0.6
- Replace preexec_fn as start_new_session
- No need to mask signals for subprocess call</changelog>
  <changelog author="XLiang@suse.com" date="1589889600">- Add ssh_key option used by -i option of ssh and scp(bsc#1169581)
  Add patch 0001-Add-ssh_key-option-used-by-i-option-of-ssh-scp.patch</changelog>
</package>
<package pkgid="f8dec9e33df95c04160e1c7a317375e43d2930137780149511b68b019711a200" name="python3-py" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="5.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="467945d3fdbfe3478fa7b3632d217cb687c4dd85a813c19654f9ba8a77398eac" name="python3-rados" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="41549a8e8c3ae348dec1ff5df0246339a554ef722d758dcbd885ebf39b993b2b" name="python3-rados" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="89426d6b667b02f306fae401cf063af4464f91ff407cfed3cf2bbbfbed82d6e8" name="python3-rados" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f7b0c0ca1a35b1c6dda436b9a1ef015ca3fcceba1fc90c5f74940ee5761b3b7e" name="python3-rados" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc669e96214ed0e57eba620956aee9d81362223e0a204e127b0ee42096713d03" name="python3-rados" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cfe115eb133a9b95c81aad836907b75a3e0680ad8d3d99c8e5f4e8d11a811204" name="python3-rados" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="822533fa7523823b162c597d07c0e8c293fff41747da4fb5ff23a5ab3e7a9dc0" name="python3-rados" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3194d0f6a14cb03bd144494b22c7a3f784655104da3e5a08ddb06f5fe918611e" name="python3-rados" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3fc50611c69a4d14cfaa2def67d65aa974e764e9e0ef27ab18033169b5b3cb7b" name="python3-rbd" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bbd45634c02bb0dcc81ab1bb24a9ef9e279c92185e792b9c76137a877109d4f7" name="python3-rbd" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="63aa4e227a92c730f6189875332a35f1f90ac8e48df7c8c53b192a7e23a1433d" name="python3-rbd" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="20e86546854a8ef813c92144eb38d8bfed0e6fdc7c17bfe56be93b54f14e2025" name="python3-rbd" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae8e2465c31a9ed11d939aef65df678328e2caee9d6bb544d1935b2f606eb8d9" name="python3-rbd" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f1ded28a0703b38cd7a202add67cd5d75135fadb4d8e9c36538bffe273272441" name="python3-rbd" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4ce8f579afc3a851639bef628839c402a2dd771aa45271ed7ef7b1002a45b781" name="python3-rbd" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="09f9428305bfc178293782dd0f1a637a03727a6975ba0716719e9b48efe304d2" name="python3-rbd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d853b85c428011ccf48c8f0a787fb8f92eca248d818c67ca4fbd7c1b60ac27a9" name="python3-redis" arch="noarch">
  <version epoch="0" ver="3.4.1" rel="3.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1542369600">- add recommendation for python-hiredis as requested by @mimi_vx in Request#649524</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Update to 3.1.0:
  * Connection URLs must have one of the following schemes:
    redis://, rediss://, unix://. Thanks @jdupl123. #961/#969
  * Fixed an issue with retry_on_timeout logic that caused some TimeoutErrors
    to be retried. Thanks Aaron Yang. #1022/#1023
  * Added support for SNI for SSL. Thanks @oridistor and Roey Prat. #1087
  * Fixed ConnectionPool repr for pools with no connections. Thanks
    Cody Scott. #1043/#995
  * Fixed GEOHASH to return a None value when specifying a place that
    doesn't exist on the server. Thanks @guybe7. #1126
  * Fixed XREADGROUP to return an empty dictionary for messages that
    have been deleted but still exist in the unacknowledged queue. Thanks
    @xeizmendi. #1116
  * Added an owned method to Lock objects. owned returns a boolean
    indicating whether the current lock instance still owns the lock.
    Thanks Dave Johansen. #1112
  * Allow lock.acquire() to accept an optional token argument. If
    provided, the token argument is used as the unique value used to claim
    the lock. Thankd Dave Johansen. #1112
  * Added a reacquire method to Lock objects. reaquire attempts to renew
    the lock such that the timeout is extended to the same value that the
    lock was initially acquired with. Thanks Ihor Kalnytskyi. #1014
  * Stream names found within XREAD and XREADGROUP responses now properly
    respect the decode_responses flag.
  * XPENDING_RANGE now requires the user the specify the min, max and
    count arguments. Newer versions of Redis prevent ount from being
    infinite so it's left to the user to specify these values explicitly.
  * ZADD now returns None when xx=True and incr=True and an element
    is specified that doesn't exist in the sorted set. This matches
    what the server returns in this case. #1084
  * Added client_kill_filter that accepts various filters to identify
    and kill clients. Thanks Theofanis Despoudis. #1098
  * Fixed a race condition that occurred when unsubscribing and
    resubscribing to the same channel or pattern in rapid succession.
    Thanks Marcin Raczy?ski. #764
  * Added a LockNotOwnedError that is raised when trying to extend or
    release a lock that is no longer owned. This is a subclass of LockError
    so previous code should continue to work as expected. Thanks Joshua
    Harlow. #1095
  * Fixed a bug in GEORADIUS that forced decoding of places without
    respecting the decode_responses option. Thanks Bo Bayles. #1082
- Drop no longer needed redis-skip-rounding.patch</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1550491200">- Update to 3.2.0 bsc#1131555:
  * Added support for `select.poll` to test whether data can be read
    on a socket. This should allow for significantly more connections to
    be used with pubsub. Fixes #486/#1115
  * Attempt to guarentee that the ConnectionPool hands out healthy
    connections. Healthy connections are those that have an established
    socket connection to the Redis server, are ready to accept a command
    and have no data available to read. Fixes #1127/#886
  * Use the socket.IPPROTO_TCP constant instead of socket.SOL_TCP.
    IPPROTO_TCP is available on more interpreters (Jython for instance).
    Thanks @Junnplus. #1130
  * Fixed a regression introduced in 3.0 that mishandles exceptions not
    derived from the base Exception class. KeyboardInterrupt and
    gevent.timeout notable. Thanks Christian Fersch. #1128/#1129
  * Significant improvements to handing connections with forked processes.
    Parent and child processes no longer trample on each others' connections.
    Thanks to Jay Rolette for the patch and highlighting this issue.
    [#504]/#732/#784/#863
  * PythonParser no longer closes the associated connection's socket. The
    connection itself will close the socket. #1108/#1085</changelog>
  <changelog author="jayvdb@gmail.com" date="1553601600">- Update to v3.2.1
  * Fix SentinelConnectionPool to work in multiprocess/forked
    environments</changelog>
  <changelog author="jayvdb@gmail.com" date="1554033600">- Add missing build dependency setuptools</changelog>
  <changelog author="mcalabkova@suse.com" date="1565611200">- Update to v3.3.6
  * Resolve a race condition with the PubSubWorkerThread. #1150
  * Response callbacks are now case insensitive.
  * Added support for hiredis-py 1.0.0 encoding error support.
  * Add READONLY and READWRITE commands.
  * Added extensive health checks that keep the connections lively.
  * Many more changes, see upstream changelog.</changelog>
  <changelog author="tchvatal@suse.com" date="1568116800">- Update to 3.3.8:
  * Fixed MONITOR parsing to properly parse IPv6 client addresses
  * Fixed a regression introduced in 3.3.0</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * be more specifc in %files section
- update to version 3.3.11:
  * Further fix for the SSLError -&gt; TimeoutError mapping to work on
    obscure releases of Python 2.7.
- changes from version 3.3.10:
  * Fixed a potential error handling bug for the SSLError -&gt;
    TimeoutError mapping introduced in 3.3.9. hanks @zbristow. #1224
- changes from version 3.3.9:
  * Mapped Python 2.7 SSLError to TimeoutError where
    appropriate. Timeouts should now consistently raise TimeoutErrors
    on Python 2.7 for both unsecured and secured connections. Thanks
    @zbristow. #1222</changelog>
  <changelog author="buschmann23@opensuse.org" date="1576238400">- Fix tests with redis pre 5.0.0:
  * 0001-fix-tests-with-redis-pre-5.0.0.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584619200">- version update to 3.4.1
  * 3.4.1
  * Move the username argument in the Redis and Connection classes to the
    end of the argument list. This helps those poor souls that specify all
    their connection options as non-keyword arguments. #1276
  * Prior to ACL support, redis-py ignored the username component of
    Connection URLs. With ACL support, usernames are no longer ignored and
    are used to authenticate against an ACL rule. Some cloud vendors with
    managed Redis instances (like Heroku) provide connection URLs with a
    username component pre-ACL that is not intended to be used. Sending that
    username to Redis servers &lt; 6.0.0 results in an error. Attempt to detect
    this condition and retry the AUTH command with only the password such
    that authentication continues to work for these users. #1274
  * Removed the __eq__ hooks to Redis and ConnectionPool that were added
    in 3.4.0. This ended up being a bad idea as two separate connection
    pools be considered equal yet manage a completely separate set of
    connections.
  * 3.4.0
  * Allow empty pipelines to be executed if there are WATCHed keys.
    This is a convenient way to test if any of the watched keys changed
    without actually running any other commands. Thanks @brianmaissy.
    [#1233], #1234
  * Removed support for end of life Python 3.4.
  * Added support for all ACL commands in Redis 6. Thanks @IAmATeaPot418
    for helping.
  * Pipeline instances now always evaluate to True. Prior to this change,
    pipeline instances relied on __len__ for boolean evaluation which
    meant that pipelines with no commands on the stack would be considered
    False. #994
  * Client instances and Connection pools now support a 'client_name'
    argument. If supplied, all connections created will call CLIENT SETNAME
    as soon as the connection is opened. Thanks to @Habbie for supplying
    the basis of this change. #802
  * Added the 'ssl_check_hostname' argument to specify whether SSL
    connections should require the server hostname to match the hostname
    specified in the SSL cert. By default 'ssl_check_hostname' is False
    for backwards compatibility. #1196
  * Slightly optimized command packing. Thanks @Deneby67. #1255
  * Added support for the TYPE argument to SCAN. Thanks @netocp. #1220
  * Better thread and fork safety in ConnectionPool and
    BlockingConnectionPool. Added better locking to synchronize critical
    sections rather than relying on CPython-specific implementation details
    relating to atomic operations. Adjusted how the pools identify and
    deal with a fork. Added a ChildDeadlockedError exception that is
    raised by child processes in the very unlikely chance that a deadlock
    is encountered. Thanks @gmbnomis, @mdellweg, @yht804421715. #1270,
    [#1138], #1178, #906, #1262
  * Added __eq__ hooks to the Redis and ConnectionPool classes.
    Thanks @brainix. #1240
- deleted patches
  - 0001-fix-tests-with-redis-pre-5.0.0.patch (upstreamed)</changelog>
</package>
<package pkgid="aabb48caa55734f6ff5f4c5dd1980f2b5b995a8d032331500b26d5229381ffed" name="python3-rgw" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a6ecd588c0dfe48ef4e79b134afbaf4e460cd92c358fc391c8b189a72c4dab0a" name="python3-rgw" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ea3f699823e8a8e69ab608e1191120c45a909c6e2a51901314a36825afaa8d8b" name="python3-rgw" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d7da93c77743c3150202f78fac780f835436982931af356da30cf5a2aa86f307" name="python3-rgw" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dd7a3f5bcfaa7b75d8577de22fab6907b0b25b26690efcbed7e30844ab3a2b50" name="python3-rgw" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4094aeb560a60d0536de6ee94f221841acc71b7097c1a9e8a21c6cc85b36d585" name="python3-rgw" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e0147d4b813cbc98d09e4ac408a6bb77f0a2f7a400737c3e0598e21068d1b170" name="python3-rgw" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c5dbfecb255344fbfe544c37106763626cf4e3dd55ce4a408c1c5373edb2756b" name="python3-rgw" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b1a190c1ce7d4293adcb6a2f77b4fb381681f373d8a35283dd3145ee0a32e954" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="8de373c167b438fd491f66231a68d0e0de04c8bf51b3d6412d623f9212a2e9fc" name="python3-salt" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="d6031b180413ff75deef7ca85cbc333a4551d66deb5be7166e7f8d12ec838a48" name="python3-salt" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="e9a8402868a883bf6a408c31dfa0830774be39880f1b7b93be59de7609919cea" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="acdfd8f2ccb90560af62e422231ccd88e6c4b537902644097c751646b8e201f3" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="2d3e136c07ae8f0114f9d47d2c05ed7a563d59d9f591a9fa3bb0a8079035e938" name="python3-spacewalk-check" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="430dc9fd9a830332cb6bafdbc34e6ca421b04be659637d39c628320076867fd1" name="python3-spacewalk-client-setup" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="103ed6f6fcf7bc088ed83414f30ca35ea063af1df51b18a48635f4b13ca15a3a" name="python3-spacewalk-client-tools" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="f84f2bdc3a623e901692a4426ec40a2ac682dd383057f634ffbaab2ce2205183" name="python3-sss-murmur" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="70ee42757f4d4b62b1f423d5c24cfee3ead62ec37c9c33b271c025cb27d06b5c" name="python3-sss-murmur" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="5f1a864d42873fa89f297b9a1b95740bfb599844c1e7236ee9dd11a7aa22dd1b" name="python3-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d6f4a438764015ff6b59af06ee1dad5d5c3b1405d0ba0a26bd3ad10aa5a8c39b" name="python3-sss-murmur" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="e8127c23d3dbdbcf66c755d08f82fe03d31d81be452070be8755adc7f225b82b" name="python3-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="f673dc865b48889d3fca4388fd56f51efa455aeffa394fb1ab47f2a31db99f26" name="python3-sss_nss_idmap" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="ad7f49ef46994ff962a82b8ad7f5ea98e99be50344042b0eb65805e20914acb3" name="python3-sss_nss_idmap" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="8802ba4039c08649d38962f7648f4c4d6891cf36bb3fb5446100906a03d77938" name="python3-sss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="737ceb1a8325eb49a0ea0f70d86886131027c366c8f4298b2f92115538f08fdf" name="python3-sss_nss_idmap" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="e0e1fd9d2fafc132d69eac978cd68264fa5013e40926124bb033d56f36b02b35" name="python3-sss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="6d8d1ffa292e210b23e93c04974d0032a167888494e3c253cd9b797e11fa2f4d" name="python3-sssd-config" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d8239c76a48c6b2446c12f5634ed2052d72021343de770264f714463dce7a003" name="python3-sssd-config" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="101a45353ee58bea0dbe95d5e9ecb0af9d3d7ad01874a4e917606eafebe62028" name="python3-sssd-config" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="3285c33e13753a4e648d46efc8bf9d2bea1e0dd15ab6a45001f384aa01fd4d6e" name="python3-sssd-config" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="2f11e90cf5fb2765882ddf80db875c346d1fe18bf0557ea1b542118d0314de57" name="python3-sssd-config" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="edcfe7bf87cb6c4d42886861e7e8e2659ef958f3a8a8a65d0ebf1556faa4c15a" name="python3-virt-bootstrap" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="5.3.124"/>
  <changelog author="cbosdonnat@suse.com" date="1504785600">- Release 1.0.0 (fate#321985)</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- excludearch for i586 and s390 (bsc#1085644)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1562673600">- Allow providing the container's root password using a file.
  bsc#1140750, CVE-2019-13314
  added patch:
    5cdf0c9c-Don-t-expose-the-root_password-via-command-line.patch</changelog>
</package>
<package pkgid="924980ddae2209dcc7dfa451dba0d987357ef57b2c767de427b36f1201fc0b85" name="python3-waitress" arch="noarch">
  <version epoch="0" ver="1.4.3" rel="3.3.1"/>
  <changelog author="speilicke@suse.com" date="1367496000">- Fix license string</changelog>
  <changelog author="dmueller@suse.com" date="1372161600">- update to 0.8.5:
  - Fix runner multisegment imports in some Python 2 revisions (see
  https://github.com/Pylons/waitress/pull/34).
  - For compatibility, WSGIServer is now an alias of TcpWSGIServer. The
  signature of BaseWSGIServer is now compatible with WSGIServer pre-0.8.4.
  - Add a command-line runner called ``waitress-serve`` to allow Waitress
  to run WSGI applications without any addional machinery. This is
  essentially a thin wrapper around the ``waitress.serve()`` function.
  - Allow parallel testing (e.g., under ``detox`` or ``nosetests --processes``)
  using PID-dependent port / socket for functest servers.
  - Fix integer overflow errors on large buffers. Thanks to Marcin Kuzminski
  for the patch.  See: https://github.com/Pylons/waitress/issues/22
  - Add support for listening on Unix domain sockets.</changelog>
  <changelog author="dmueller@suse.com" date="1376395200">- update to 0.8.6:
  - Do alternate type of checking for UNIX socket support, instead of checking
  for platform == windows.
  - Functional tests now use multiprocessing module instead of subprocess module,
  speeding up test suite and making concurrent execution more reliable.
  - Runner now appends the current working directory to ``sys.path`` to support
  running WSGI applications from a directory (i.e., not installed in a
  virtualenv).</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 0.8.7:
  - The HTTP version of the response returned by waitress when it catches an
  exception will now match the HTTP request version.
  - Fix: CONNECTION header will be HTTP_CONNECTION and not CONNECTION_TYPE
  (see https://github.com/Pylons/waitress/issues/13)</changelog>
  <changelog author="tbechtold@suse.com" date="1418385600">- update to 0.8.9:
  - Fix tests under Windows.  NB: to run tests under Windows, you cannot run
    "setup.py test" or "setup.py nosetests".  Instead you must run ``python.exe
  - c "import nose; nose.main()"``.  If you try to run the tests using the
    normal method under Windows, each subprocess created by the test suite will
    attempt to run the test suite again.  See
    https://github.com/nose-devs/nose/issues/407 for more information.
  - Give the WSGI app_iter generated when ``wsgi.file_wrapper`` is used
    (ReadOnlyFileBasedBuffer) a ``close`` method.  Do not call ``close`` on an
    instance of such a class when it's used as a WSGI app_iter, however.  This is
    part of a fix which prevents a leakage of file descriptors; the other part of
    the fix was in WebOb
    (https://github.com/Pylons/webob/commit/951a41ce57bd853947f842028bccb500bd5237da).
  - Allow trusted proxies to override ``wsgi.url_scheme`` via a request header,
    ``X_FORWARDED_PROTO``.  Allows proxies which serve mixed HTTP / HTTPS
    requests to control signal which are served as HTTPS.  See
    https://github.com/Pylons/waitress/pull/42.
  - Fix some cases where the creation of extremely large output buffers (greater
    than 2GB, suspected to be buffers added via ``wsgi.file_wrapper``) might
    cause an OverflowError on Python 2.  See
    https://github.com/Pylons/waitress/issues/47.
  - When the ``url_prefix`` adjustment starts with more than one slash, all
    slashes except one will be stripped from its beginning.  This differs from
    older behavior where more than one leading slash would be preserved in
    ``url_prefix``.
  - If a client somehow manages to send an empty path, we no longer convert the
    empty path to a single slash in ``PATH_INFO``.  Instead, the path remains
    empty.  According to RFC 2616 section "5.1.2 Request-URI", the scenario of a
    client sending an empty path is actually not possible because the request URI
    portion cannot be empty.
  - If the ``url_prefix`` adjustment matches the request path exactly, we now
    compute ``SCRIPT_NAME`` and ``PATH_INFO`` properly.  Previously, if the
    ``url_prefix`` was ``/foo`` and the path received from a client was ``/foo``,
    we would set *both* ``SCRIPT_NAME`` and ``PATH_INFO`` to ``/foo``.  This was
    incorrect.  Now in such a case we set ``PATH_INFO`` to the empty string and
    we set ``SCRIPT_NAME`` to ``/foo``.  Note that the change we made has no
    effect on paths that do not match the ``url_prefix`` exactly (such as
    ``/foo/bar``); these continue to operate as they did.  See
    https://github.com/Pylons/waitress/issues/46
  - Preserve header ordering of headers with the same name as per RFC 2616.  See
    https://github.com/Pylons/waitress/pull/44
  - When waitress receives a ``Transfer-Encoding: chunked`` request, we no longer
    send the ``TRANSFER_ENCODING`` nor the ``HTTP_TRANSFER_ENCODING`` value to
    the application in the environment.  Instead, we pop this header.  Since we
    cope with chunked requests by buffering the data in the server, we also know
    when a chunked request has ended, and therefore we know the content length.
    We set the content-length header in the environment, such that applications
    effectively never know the original request was a T-E: chunked request; it
    will appear to them as if the request is a non-chunked request with an
    accurate content-length.
  - Cope with the fact that the ``Transfer-Encoding`` value is case-insensitive.
  - When the ``--unix-socket-perms`` option was used as an argument to
    ``waitress-serve``, a ``TypeError`` would be raised.  See
    https://github.com/Pylons/waitress/issues/50.
- Enable testsuite during build</changelog>
  <changelog author="dmueller@suse.com" date="1463745600">- update to 0.9.0:
  * Security/Protections
  - Building on the changes made in pull request 117, add in checking for line
    feed/carriage return HTTP Response Splitting in the status line, as well as
    the key of a header. See https://github.com/Pylons/waitress/pull/124 and
    https://github.com/Pylons/waitress/issues/122.
  - Waitress will no longer accept headers or status lines with
    newline/carriage returns in them, thereby disallowing HTTP Response
    Splitting.
  * Bugfixes
  - FileBasedBuffer and more important ReadOnlyFileBasedBuffer no longer report
    False when tested with bool(), instead always returning True, and becoming
    more iterator like.
  - Call prune() on the output buffer at the end of a request so that it doesn't
    continue to grow without bounds.</changelog>
  <changelog author="tbechtold@suse.com" date="1479211200">- update to 1.0.1:
  - IPv6 support on Windows was broken due to missing constants in the socket
    module. This has been resolved by setting the constants on Windows if they
    are missing. See https://github.com/Pylons/waitress/issues/138
  - A ValueError was raised on Windows when passing a string for the port, on
    Windows in Python 2 using service names instead of port numbers doesn't work
    with `getaddrinfo`. This has been resolved by attempting to convert the port
    number to an integer, if that fails a ValueError will be raised. See
    https://github.com/Pylons/waitress/issues/139
  - Removed `AI_ADDRCONFIG` from the call to `getaddrinfo`, this resolves an
    issue whereby `getaddrinfo` wouldn't return any addresses to `bind` to on
    hosts where there is no internet connection but localhost is requested to be
    bound to. See https://github.com/Pylons/waitress/issues/131 for more
    information.
- disable tests. need network access.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493640000">- Update to 1.0.2
  * Python 3.6 is now officially supported in Waitress
  * Add a work-around for libc issue on Linux not following the
    documented standards. If getnameinfo() fails because of DNS not
    being available it should return the IP address instead of the
    reverse DNS entry, however instead getnameinfo() raises. We
    catch this, and ask getnameinfo() for the same information
    again, explicitly asking for IP address instead of reverse
    DNS hostname.
- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="arun@gmx.de" date="1507896000">- update to version 1.1.0:
  * Features
    + Waitress now has a __main__ and thus may be called with "python
  - mwaitress"
  * Bugfixes
    + Waitress no longer allows lowercase HTTP verbs. This change was
    made to fall in line with most HTTP servers. See
    https://github.com/Pylons/waitress/pull/170
    + When receiving non-ascii bytes in the request URL, waitress will
    no longer abruptly close the connection, instead returning a 400
    Bad Request. See https://github.com/Pylons/waitress/pull/162 and
    https://github.com/Pylons/waitress/issues/64</changelog>
  <changelog author="tserong@suse.com" date="1600948800">- update to 1.4.3 to include fixes for:
  * CVE-2019-16785 / bsc#1161088
  * CVE-2019-16786 / bsc#1161089
  * CVE-2019-16789 / bsc#1160790
  * CVE-2019-16792 / bsc#1161670</changelog>
</package>
<package pkgid="f7700f9a3f9c67c0de3b7f173dbe69de6ac80df62e088983a66598774a767673" name="rados-objclass-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9326671d9b6e09311e25f20088ceb4c85f723b7d7758ce7d22f1030b949944f1" name="rados-objclass-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1d36aa158d1043dc30e793234b75abef7eedbc19acfba085d606cb778244dd4d" name="rados-objclass-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8b87518e7f84d821386bd1d429425e9e466109c30a1e549cbb7c6045a86b71b4" name="rados-objclass-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dd708f9676a724ca47b6150ef9fd957eecdd15708fa299a4663dd12aae904489" name="rados-objclass-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="59a1cccb26db14ed998b69377b461585517d622e345397c8e40f878375c6ae03" name="rados-objclass-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="389717a70369c567737ccd9151d8661372236b217999131c712f08c74da3b82f" name="rados-objclass-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0a6b792757f2ff72c943afec13068c5d7bd017a4c8af266e949e4a5942b0c460" name="rados-objclass-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="967f16c284110b7b75ed909a5e9ffcef7ede87c57894f3a71af24203bc792dc9" name="rbd-fuse" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0a7d75fc2da8d18a0ccbcd880ae9397ac02ecc1f34a238c1bb47eff92d14929c" name="rbd-fuse" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5376e645197d7ef58cde43bee5d43b8a8e82062aba33d4460ac7d954ce0f19ec" name="rbd-fuse" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f1bdfc9d32a073e0118af9d13a0d2b10b01985292a3ee4adc8bdda6d1725038e" name="rbd-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="09bd8b442fb03228d1d6b37972d462932b4eb55f7d9d9c4b5946b20d42d975c8" name="rbd-fuse" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="72a5fe21e759830047df44bfcefcfb136b50eb54ed664609691d80c0457d46a7" name="rbd-fuse" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1d40b85320647b8a3c45e503ebd6591f99aa20232117f4fd5fb06bcdee4603fd" name="rbd-fuse" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1b6ce439be524a20e9796a90300b9983ba6ac326258f6dfc8a5ad8a739877b62" name="rbd-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7ada2b75d3faaac1515aa4267bab902601eb6cdfbb17e522d47a7bd2bdb09e42" name="rbd-mirror" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="82a3ce5b2814ad94e32c85715b235344994f738b015cb3c6a470afd181eb336b" name="rbd-mirror" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="980543fd1b2ce58817e5c256231d985b791b1144b12229200bc2251723215b8e" name="rbd-mirror" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ad4858c067c8438e6c9c7065d74e12b709e0a77227b418c7089836fa1cfa524c" name="rbd-mirror" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fe500fe94b8af92f7d62d60fcfbba13828533d3e9b4bba73f35c15841d21639f" name="rbd-mirror" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1b8e0acc25966d77db3f06e90f17f5e6f47874fe4baf6276e39c6de28c980b49" name="rbd-mirror" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6789126ce1190ede5c60afa1ba7b03e2aba4ac59eb56fac3b3194f988ee52d7d" name="rbd-mirror" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f68dfc70448ade316fbdec19ea965794427f227c330643ac976d27e56af48c93" name="rbd-mirror" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="16478ead9361a534179abe8a72d68c95e39c5babf0c53557f3ac0e3dd4c42ced" name="rbd-nbd" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f2343b8847229b3d33c604f8d6e25269edae5f5561af0d754e12c6c79d848bd4" name="rbd-nbd" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2c5d4f63c8ede11bd2445d2a189edde8e360cff5dd29f3663cd8bd2c5f72f5ed" name="rbd-nbd" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="35289f3e9f9c4579d6215667408d20a9a700e9f0af7739ceacd4c3d22189ac56" name="rbd-nbd" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4203e56591d589dd1a8c24c3b86946c44f48aeea67559fc85bd57e7ff0b2f47f" name="rbd-nbd" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b42821e065e0c0ff30ce5ec6f7b6e0a6bda5f30d06aa8f35ff4620a08d065b9b" name="rbd-nbd" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fce0199271ed2e729505d04af7266dc7ef8a38d5b8c7b85593a57c6b6597d2db" name="rbd-nbd" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e0770738b9fff9b57c6bce3be1b4a9819b995427188fac1cb268be3e21816fc7" name="rbd-nbd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e4febe21ff6795c9fdf91fe0deefd3e50e9b9622f8ffd00a6f7544c1a1c1bb3f" name="redis" arch="aarch64">
  <version epoch="0" ver="6.0.8" rel="1.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1588334400">- add hash file from redis-hashes and verify it during build</changelog>
  <changelog author="schwab@suse.de" date="1588334401">- ppc-atomic.patch: use libatomic also on ppc</changelog>
  <changelog author="mrueckert@suse.de" date="1588593600">- Update to 6.0.1
  * https://raw.githubusercontent.com/antirez/redis/6.0.1/00-RELEASENOTES
  * XCLAIM AOF/replicas propagation fixed.
  * Client side caching: new NOLOOP option to avoid getting
    notified about changes performed by ourselves.
  * ACL GENPASS now uses HMAC-SHA256 and have an optional
    "bits" argument.  It means you can use it as a general purpose
    "secure random strings" primitive!
  * Cluster "SLOTS" subcommand memory optimization.
  * The LCS command is now a subcommand of STRALGO.
  * Meaningful offset for replicas as well. More successful
    partial resynchronizations.
  * Optimize memory usage of deferred replies.
  * Faster CRC64 algorithm for faster RDB loading.
  * XINFO STREAM FULL, a new subcommand to get the whole stream
    state.
  * CLIENT KILL USER &lt;username&gt;.
  * MIGRATE AUTH2 option, for ACL style authentication support.
  * Other random bugfixes.</changelog>
  <changelog author="mrueckert@suse.de" date="1588593601">- add BR pkgconfig(libsystemd) for the rewritten systemd support
  and force building with it</changelog>
  <changelog author="schwab@suse.de" date="1589025600">- redis-disable_integration_logging.patch: remove
- redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch: remove
- getMcontextEip-return-value.patch: Add missing return value</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589716800">- redis 6.0.3:
  * fix a crash introduced in 6.0.2
- includes changes from 6.0.2:
  * bug fixes
  * fix to client side caching when keys are evicted from the
    tracking table but no notifications are sent</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- redis 6.0.4:
  * fix a severe replication bug introduced in Redis 6 by the
    "meaningful offset" feature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
</package>
<package pkgid="163ef9980818baebf644bf276b04bd02e162e794a6252f4ee6eb956be53976ff" name="redis" arch="i586">
  <version epoch="0" ver="6.0.8" rel="1.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1588334400">- add hash file from redis-hashes and verify it during build</changelog>
  <changelog author="schwab@suse.de" date="1588334401">- ppc-atomic.patch: use libatomic also on ppc</changelog>
  <changelog author="mrueckert@suse.de" date="1588593600">- Update to 6.0.1
  * https://raw.githubusercontent.com/antirez/redis/6.0.1/00-RELEASENOTES
  * XCLAIM AOF/replicas propagation fixed.
  * Client side caching: new NOLOOP option to avoid getting
    notified about changes performed by ourselves.
  * ACL GENPASS now uses HMAC-SHA256 and have an optional
    "bits" argument.  It means you can use it as a general purpose
    "secure random strings" primitive!
  * Cluster "SLOTS" subcommand memory optimization.
  * The LCS command is now a subcommand of STRALGO.
  * Meaningful offset for replicas as well. More successful
    partial resynchronizations.
  * Optimize memory usage of deferred replies.
  * Faster CRC64 algorithm for faster RDB loading.
  * XINFO STREAM FULL, a new subcommand to get the whole stream
    state.
  * CLIENT KILL USER &lt;username&gt;.
  * MIGRATE AUTH2 option, for ACL style authentication support.
  * Other random bugfixes.</changelog>
  <changelog author="mrueckert@suse.de" date="1588593601">- add BR pkgconfig(libsystemd) for the rewritten systemd support
  and force building with it</changelog>
  <changelog author="schwab@suse.de" date="1589025600">- redis-disable_integration_logging.patch: remove
- redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch: remove
- getMcontextEip-return-value.patch: Add missing return value</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589716800">- redis 6.0.3:
  * fix a crash introduced in 6.0.2
- includes changes from 6.0.2:
  * bug fixes
  * fix to client side caching when keys are evicted from the
    tracking table but no notifications are sent</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- redis 6.0.4:
  * fix a severe replication bug introduced in Redis 6 by the
    "meaningful offset" feature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
</package>
<package pkgid="bbe8b999e74599ae46641ef2616bc8f9088c0c3fb6ee3a1d421b5e7c68b876a0" name="redis" arch="ppc64le">
  <version epoch="0" ver="6.0.8" rel="1.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1588334400">- add hash file from redis-hashes and verify it during build</changelog>
  <changelog author="schwab@suse.de" date="1588334401">- ppc-atomic.patch: use libatomic also on ppc</changelog>
  <changelog author="mrueckert@suse.de" date="1588593600">- Update to 6.0.1
  * https://raw.githubusercontent.com/antirez/redis/6.0.1/00-RELEASENOTES
  * XCLAIM AOF/replicas propagation fixed.
  * Client side caching: new NOLOOP option to avoid getting
    notified about changes performed by ourselves.
  * ACL GENPASS now uses HMAC-SHA256 and have an optional
    "bits" argument.  It means you can use it as a general purpose
    "secure random strings" primitive!
  * Cluster "SLOTS" subcommand memory optimization.
  * The LCS command is now a subcommand of STRALGO.
  * Meaningful offset for replicas as well. More successful
    partial resynchronizations.
  * Optimize memory usage of deferred replies.
  * Faster CRC64 algorithm for faster RDB loading.
  * XINFO STREAM FULL, a new subcommand to get the whole stream
    state.
  * CLIENT KILL USER &lt;username&gt;.
  * MIGRATE AUTH2 option, for ACL style authentication support.
  * Other random bugfixes.</changelog>
  <changelog author="mrueckert@suse.de" date="1588593601">- add BR pkgconfig(libsystemd) for the rewritten systemd support
  and force building with it</changelog>
  <changelog author="schwab@suse.de" date="1589025600">- redis-disable_integration_logging.patch: remove
- redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch: remove
- getMcontextEip-return-value.patch: Add missing return value</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589716800">- redis 6.0.3:
  * fix a crash introduced in 6.0.2
- includes changes from 6.0.2:
  * bug fixes
  * fix to client side caching when keys are evicted from the
    tracking table but no notifications are sent</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- redis 6.0.4:
  * fix a severe replication bug introduced in Redis 6 by the
    "meaningful offset" feature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
</package>
<package pkgid="768c2836db1e12b85e6f01324c84a0b75147bb8884f843fe9e8f0f12a4ceec18" name="redis" arch="s390x">
  <version epoch="0" ver="6.0.8" rel="1.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1588334400">- add hash file from redis-hashes and verify it during build</changelog>
  <changelog author="schwab@suse.de" date="1588334401">- ppc-atomic.patch: use libatomic also on ppc</changelog>
  <changelog author="mrueckert@suse.de" date="1588593600">- Update to 6.0.1
  * https://raw.githubusercontent.com/antirez/redis/6.0.1/00-RELEASENOTES
  * XCLAIM AOF/replicas propagation fixed.
  * Client side caching: new NOLOOP option to avoid getting
    notified about changes performed by ourselves.
  * ACL GENPASS now uses HMAC-SHA256 and have an optional
    "bits" argument.  It means you can use it as a general purpose
    "secure random strings" primitive!
  * Cluster "SLOTS" subcommand memory optimization.
  * The LCS command is now a subcommand of STRALGO.
  * Meaningful offset for replicas as well. More successful
    partial resynchronizations.
  * Optimize memory usage of deferred replies.
  * Faster CRC64 algorithm for faster RDB loading.
  * XINFO STREAM FULL, a new subcommand to get the whole stream
    state.
  * CLIENT KILL USER &lt;username&gt;.
  * MIGRATE AUTH2 option, for ACL style authentication support.
  * Other random bugfixes.</changelog>
  <changelog author="mrueckert@suse.de" date="1588593601">- add BR pkgconfig(libsystemd) for the rewritten systemd support
  and force building with it</changelog>
  <changelog author="schwab@suse.de" date="1589025600">- redis-disable_integration_logging.patch: remove
- redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch: remove
- getMcontextEip-return-value.patch: Add missing return value</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589716800">- redis 6.0.3:
  * fix a crash introduced in 6.0.2
- includes changes from 6.0.2:
  * bug fixes
  * fix to client side caching when keys are evicted from the
    tracking table but no notifications are sent</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- redis 6.0.4:
  * fix a severe replication bug introduced in Redis 6 by the
    "meaningful offset" feature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
</package>
<package pkgid="691f3ce833cd950f093566230acc99fdd5e3f3519357bb3b1c068369a6ac419e" name="redis" arch="src">
  <version epoch="0" ver="6.0.8" rel="1.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1588334400">- add hash file from redis-hashes and verify it during build</changelog>
  <changelog author="schwab@suse.de" date="1588334401">- ppc-atomic.patch: use libatomic also on ppc</changelog>
  <changelog author="mrueckert@suse.de" date="1588593600">- Update to 6.0.1
  * https://raw.githubusercontent.com/antirez/redis/6.0.1/00-RELEASENOTES
  * XCLAIM AOF/replicas propagation fixed.
  * Client side caching: new NOLOOP option to avoid getting
    notified about changes performed by ourselves.
  * ACL GENPASS now uses HMAC-SHA256 and have an optional
    "bits" argument.  It means you can use it as a general purpose
    "secure random strings" primitive!
  * Cluster "SLOTS" subcommand memory optimization.
  * The LCS command is now a subcommand of STRALGO.
  * Meaningful offset for replicas as well. More successful
    partial resynchronizations.
  * Optimize memory usage of deferred replies.
  * Faster CRC64 algorithm for faster RDB loading.
  * XINFO STREAM FULL, a new subcommand to get the whole stream
    state.
  * CLIENT KILL USER &lt;username&gt;.
  * MIGRATE AUTH2 option, for ACL style authentication support.
  * Other random bugfixes.</changelog>
  <changelog author="mrueckert@suse.de" date="1588593601">- add BR pkgconfig(libsystemd) for the rewritten systemd support
  and force building with it</changelog>
  <changelog author="schwab@suse.de" date="1589025600">- redis-disable_integration_logging.patch: remove
- redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch: remove
- getMcontextEip-return-value.patch: Add missing return value</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589716800">- redis 6.0.3:
  * fix a crash introduced in 6.0.2
- includes changes from 6.0.2:
  * bug fixes
  * fix to client side caching when keys are evicted from the
    tracking table but no notifications are sent</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- redis 6.0.4:
  * fix a severe replication bug introduced in Redis 6 by the
    "meaningful offset" feature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
</package>
<package pkgid="0da00ce4a4f3ddf08efb6acfdfcb95db0b8bca2105091d5e6b22d262459060e9" name="redis" arch="x86_64">
  <version epoch="0" ver="6.0.8" rel="1.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1588334400">- add hash file from redis-hashes and verify it during build</changelog>
  <changelog author="schwab@suse.de" date="1588334401">- ppc-atomic.patch: use libatomic also on ppc</changelog>
  <changelog author="mrueckert@suse.de" date="1588593600">- Update to 6.0.1
  * https://raw.githubusercontent.com/antirez/redis/6.0.1/00-RELEASENOTES
  * XCLAIM AOF/replicas propagation fixed.
  * Client side caching: new NOLOOP option to avoid getting
    notified about changes performed by ourselves.
  * ACL GENPASS now uses HMAC-SHA256 and have an optional
    "bits" argument.  It means you can use it as a general purpose
    "secure random strings" primitive!
  * Cluster "SLOTS" subcommand memory optimization.
  * The LCS command is now a subcommand of STRALGO.
  * Meaningful offset for replicas as well. More successful
    partial resynchronizations.
  * Optimize memory usage of deferred replies.
  * Faster CRC64 algorithm for faster RDB loading.
  * XINFO STREAM FULL, a new subcommand to get the whole stream
    state.
  * CLIENT KILL USER &lt;username&gt;.
  * MIGRATE AUTH2 option, for ACL style authentication support.
  * Other random bugfixes.</changelog>
  <changelog author="mrueckert@suse.de" date="1588593601">- add BR pkgconfig(libsystemd) for the rewritten systemd support
  and force building with it</changelog>
  <changelog author="schwab@suse.de" date="1589025600">- redis-disable_integration_logging.patch: remove
- redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch: remove
- getMcontextEip-return-value.patch: Add missing return value</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589716800">- redis 6.0.3:
  * fix a crash introduced in 6.0.2
- includes changes from 6.0.2:
  * bug fixes
  * fix to client side caching when keys are evicted from the
    tracking table but no notifications are sent</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- redis 6.0.4:
  * fix a severe replication bug introduced in Redis 6 by the
    "meaningful offset" feature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
</package>
<package pkgid="830e1f843ebbe82789c9223c5aca145d1ee4e7261753822f1c1c75e5ca0ebca8" name="reiserfs-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bfe34eec6a47a885ba05927ebc4fbb19d3167c7b5beb3fd176d58afe0d77c45e" name="reiserfs-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="6c6287549f288d391ab4481b68c07786c64a7301f9ec53a6c4d9df7a75a584f3" name="reiserfs-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="42c1215b9ff9fc6dc45fe84b48472bc077c1de04e7a17b1beed422e04699f2b7" name="reiserfs-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="c751911ab230af3ac272fb6792245948c96b257e61db5e9b0c08022b55558b74" name="reiserfs-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="3d31c48da2773d0933c7daaa0dea46ffba7989fa6eda11a096d08eff05e99b1c" name="reiserfs-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="37388af67347ef87e84203976bf97ea8e345c15459321d37e00b6864173bcc64" name="resource-agents" arch="aarch64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="74edee90e7299954920124ced612b2fe6e24236f8ddc1bc9aee4e6cf678fef8d" name="resource-agents" arch="i586">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="e1378bf15c5bf75b43d8c854183639b132265ebf64d6926fe70d961f0fae5312" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="02ee55ff88d7a16ee06e19725dfe8d0767839fa2de3f69122ceb718acf4eb170" name="resource-agents" arch="s390x">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="a665f0afd33bfe5cca8aebf1285a6d19a6eba2d74536d8a3cd565d590af4a0a3" name="resource-agents" arch="src">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="ea62f478c922c66f3046a661b7ef5865b8582c4480ef30fbe608f952921843c6" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="861450a174cf8eec7552056a0352fd08bd70875eeb3f37ad023fc6c2842d540d" name="resource-agents" arch="aarch64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="b0d603d9d1b1e25dfe8c840469963d260a507c8651eb7797e3a56dbb7c538e92" name="resource-agents" arch="i586">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="6943c7c4f751563974801463b2aa8657fdef386fdc2de7d0b77ae3a02f38948d" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="87da0094ea2b26320ebb2b9e0be5c1e8df21bd56bf2cda82e000863264ffbfee" name="resource-agents" arch="s390x">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="619414a5948363c5a5c24b4c82b679fa41f98ee98829f1850677d536dd54fc65" name="resource-agents" arch="src">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="706dee4511b763c391a3979b3177b6b82962e73f2783554af8c1e4e991e1e80b" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="a766c0935b4267c37252ae347da4a3ad122625a515b8535040ac48682aa2c11f" name="rmt-server" arch="aarch64">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="649e7346c62dcd7b055cb642b7a36c1f9e3ae7b2b2ad764e62f4463e11739e28" name="rmt-server" arch="ppc64le">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="de8bf3eb87514ba721829614dd19a043403f594e1f4c1128c3c3947b41ab3108" name="rmt-server" arch="s390x">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="061eacbfcc8d2849de62a211b1d34e34cf129a6dc1866004a3ef1e09d1bf6525" name="rmt-server" arch="src">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="71a94b050876137d9216e01151d435f6b2b03fad389e4199dc30261103217a21" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="b9bc2d4f9dbfc057d2878b9dc898c8dc261ad6a71f6b14b8074598939c5d24cc" name="rmt-server" arch="aarch64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="ed9181a1c31d95c764e2f86bd26cff9eb748d5d83833eb28c87a6dee41359c87" name="rmt-server" arch="ppc64le">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="6c55f3bbb5db06997fcbc54f233ad8e2f79f09be136ac7f0ac5565613f048b22" name="rmt-server" arch="s390x">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="60bd770a4fef73c5217d139d91a6b98de8024be61a3aa80878b942dce84ac12a" name="rmt-server" arch="src">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="88353fe38ad5de7b25a84e7d32c2606c4815cd6824bb06bca1910210034e2b8a" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="63d68e5942cf38bd19110e7194405f0aa704fc07f40d646090d571cc5914308a" name="rmt-server-config" arch="aarch64">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="2e02df3dfd24d9e851ab25fe50162a491ef1ed4d5f1d9b875069407a4cbc9a49" name="rmt-server-config" arch="ppc64le">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="d575290e150ac4163bdf407ca03637e72f57cf86e2d7bb42b56155734e6124f2" name="rmt-server-config" arch="s390x">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="14bee1e22b44f91fbd7b74226de2ed25644ce225b1f1e9e4639b405756bbc6b1" name="rmt-server-config" arch="x86_64">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="b09945185c45d047afaec6cb6de80894c629df4901bc80edbab1442bde09d747" name="rmt-server-config" arch="aarch64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="7eb3c9d1497e03b724453f99239b0065f46b2b1f4107496adde669ed6490c516" name="rmt-server-config" arch="ppc64le">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="b394afec6451a2bc03a3ed1458ac9347495b4847cb230a70ebb0c731c7b943a2" name="rmt-server-config" arch="s390x">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="bd8bbb73024b0a2ba05d917095b2af9b0ed392942acb3d7b895860218576ce49" name="rmt-server-config" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="a195b063ce15424ab236d2025f87724f01e33ce9f1f4df736dd31228c37ce1fa" name="rmt-server-pubcloud" arch="aarch64">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="693f9a009836492a40df2798971950914255eb9833bdf1a80eed1ecb39f94e19" name="rmt-server-pubcloud" arch="ppc64le">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="68ff6ef5cf81149a3b3e9cc030afa22ba0d435778def4d2690824089e6c9eb76" name="rmt-server-pubcloud" arch="s390x">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="980ee8a6e1be8d16fee15fcb60d1cc7e0a82f2b3e5c4d796a6dac5810ba855e0" name="rmt-server-pubcloud" arch="x86_64">
  <version epoch="0" ver="2.6.5" rel="3.34.1"/>
  <changelog author="jesus.bv@suse.com" date="1599048000">- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1599566400">- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurrs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599652800">- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.</changelog>
  <changelog author="tmuntaner@suse.com" date="1599739200">- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)</changelog>
  <changelog author="tmuntaner@suse.com" date="1600689600">- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing "SCC ID" vs "ID" in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601380800">- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601380801">- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.</changelog>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
</package>
<package pkgid="1bf5b003b5e29329d5633ce81f497c16395e141cfed20c8031c19ddf6c9bda97" name="rmt-server-pubcloud" arch="aarch64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="2181f41d5b12d8e88e2481130935af5b89a594438c4da7276fb10b2b6cb4a91f" name="rmt-server-pubcloud" arch="ppc64le">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="19c33061f9e25f4aa8e0fedbcc6990c93b21515353d85c128ca359808023e321" name="rmt-server-pubcloud" arch="s390x">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="28448800882e2ee6afce82281db99ee6a92844def9ac1d3ab7813fd9666f82bb" name="rmt-server-pubcloud" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="e20c60d66ead4b23fad2b32b8ad53fa2d1cfc5e5f4b1453f2a5074ae2925ef32" name="ruby2.5-rubygem-activesupport-5_1" arch="aarch64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="a533ca7ce501968f9b68e61c88d9d1ee254f197dfcb6bc6c0839b06ab1af2141" name="ruby2.5-rubygem-activesupport-5_1" arch="i586">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="e87323ee41eed783cc5e9715b119def0e89e8016ad76289213c219598d8ade41" name="ruby2.5-rubygem-activesupport-5_1" arch="ppc64le">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="8e6232c343bfe8411e5d8e8cafe0b0f313a88ff3126ec784b3888c0b5b39028c" name="ruby2.5-rubygem-activesupport-5_1" arch="s390x">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="4d4f67a29993ad4af634873b08dc4393f9574187eae8a3fddb8d908fb850c486" name="ruby2.5-rubygem-activesupport-5_1" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="94643aa01efa9d9b2c3fa215eeba540437dc8f31e5039506db1bb1c2d3a780e6" name="ruby2.5-rubygem-activesupport-doc-5_1" arch="aarch64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="2e36fb05600dae782d4cdb800204195f5f766641a3a56c31c82f2c3ec4ca38bc" name="ruby2.5-rubygem-activesupport-doc-5_1" arch="i586">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="6dcda6170d881954bfed87c059154a063bbd3a484ffc912fae1cd9c97fda819e" name="ruby2.5-rubygem-activesupport-doc-5_1" arch="ppc64le">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="920571224c31302b66b3a073ac5f36b4ecca03c78c8870b16a40c2acdd8abd97" name="ruby2.5-rubygem-activesupport-doc-5_1" arch="s390x">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="70c6c1fd98fefdc13c37171a2529b4e1a3f73bc286942d2abcbf767d48a6b18d" name="ruby2.5-rubygem-activesupport-doc-5_1" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="3f552e32279bb93bea9f1c8e0ff9980eaae8b343a3b518af2f72dfbe81997ba2" name="ruby2.5-rubygem-railties-5_1" arch="aarch64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="0add233df4001403f790368397ded4c0ebdbb3508f1eb3e098b9d2b45ee9deda" name="ruby2.5-rubygem-railties-5_1" arch="i586">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="317d51e3d06eb30c114f7855926b1b708cc1787febbc605ac160dd30f18e9aa0" name="ruby2.5-rubygem-railties-5_1" arch="ppc64le">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="f1d55609938f2672458aea204ef0efe525c30297f5290fb2528edbb5a7797511" name="ruby2.5-rubygem-railties-5_1" arch="s390x">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="f34087b2c9d32d204ce330600ff883025f149f312477a1f1590204bc7d6b8107" name="ruby2.5-rubygem-railties-5_1" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="c6ad6628a1d0d541a463bffa7582918a98eacf62f8eaed8c24a660f3871bb23d" name="ruby2.5-rubygem-railties-doc-5_1" arch="aarch64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="d32d31d28f20f4958642a4ecdcc742d7fe7aa4cd2d657b5d1b3b311077d75174" name="ruby2.5-rubygem-railties-doc-5_1" arch="i586">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="89f63c9e7847c464c63228fb78b1d3b3a4dd91047ac74a54bc9a0370ca054d10" name="ruby2.5-rubygem-railties-doc-5_1" arch="ppc64le">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="9d04c3b517aa93ad7c3738c5f6201f72b723069c1789db2d85222f1da871b1c3" name="ruby2.5-rubygem-railties-doc-5_1" arch="s390x">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="daaa43386ed0a700f1cb57885c6b2028315ac56937a41a82f3fc651b79bca236" name="ruby2.5-rubygem-railties-doc-5_1" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="8192804413cea5375f2a93544aea9179f05d4f4e7703e97a7958d3aef9aa3bc3" name="rubygem-activesupport-5_1" arch="src">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="ammartinez@suse.com" date="1503403200">- Initial package for 5.1.3</changelog>
  <changelog author="bgeuken@suse.com" date="1503403201">- Add missing gem2rpm.yml and add -5.1 suffix</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="stefano.torresi@suse.com" date="1601899200">- Backport CVE-2020-8165 patch from version 5.2 (bsc#1172186)
  * fix deserialization of untrusted data vulnernerability in MemCacheStore potentially resulting in RCE</changelog>
</package>
<package pkgid="a9a415a85bec908ff92978be68bcb174497df2a4c543351dfdfe6bf23bc60d90" name="rubygem-railties-5_1" arch="src">
  <version epoch="0" ver="5.1.4" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1453809600">- updated to version 4.2.5.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1456833600">- updated to version 4.2.5.2
  see installed CHANGELOG.md
  [#]# Rails 4.2.5.2 (February 26, 2016) ##
  * No changes.
  [#]# Rails 4.2.5.1 (January 25, 2015) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1482321600">- updated to version 5.0.1
  see installed CHANGELOG.md
  [#]# Rails 5.0.1 (December 21, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc2 (December 10, 2016) ##
  * No changes.
  [#]# Rails 5.0.1.rc1 (December 01, 2016) ##
  * Add `:skip_sprockets` to `Rails::PluginBuilder::PASSTHROUGH_OPTIONS`
  * Tsukuru Tanimichi*
  * Run `Minitest.after_run` hooks when running `rails test`.
  * Michael Grosser*
  * Run `before_configuration` callbacks as soon as application constant
    inherits from `Rails::Application`.
    Fixes #19880.
  * Yuji Yaginuma*
  * Do not run `bundle install` when generating a new plugin.
    Since bundler 1.12.0, the gemspec is validated so the `bundle install`
    command will fail just after the gem is created causing confusion to the
    users. This change was a bug fix to correctly validate gemspecs.
  * Rafael Mendonça França*
  * Ensure `/rails/info` routes match in development for apps with a catch-all globbing route.
  * Nicholas Firth-McCoy*</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3
  see installed CHANGELOG.md</changelog>
  <changelog author="enavarro@suse.com" date="1505131200">- Update to version 5.1.4</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600948800">- Add 0001-handle-puma-version.patch (fix #boo1174315)
  * fix rubygems dependencies for puma update and respect older version</changelog>
</package>
<package pkgid="7efd57489520350d5ed98b47d41bed76e7cbd9b52a2f32847d706ffa8ed35491" name="s390-tools" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="84d47730e8da5cfb0ddfd03f353c9a0d405946ccc9c78837239eaa18264d9de0" name="s390-tools" arch="src">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="944b222d2d0e11fae131d6ae8dfb22ad2831429664e820db46065d6c7bafee5b" name="s390-tools-hmcdrvfs" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="833d62158d738d48e7441f473a4bbc7dac63210e35a370b96468ae7f5146dc46" name="s390-tools-zdsfs" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="aba356e280da0c08a46570a18c9a62dbe816a1af6312cab86ce8b0082e239dfe" name="salt" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="08aebb1bdfdf3ab53f348f31a6f3490fec44c2a2a91c4f27ee23048be8ad306b" name="salt" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="e183b9f600944fd20a4504d392b19de146c04cd1ca2d6e5a79dd944715660954" name="salt" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="d6689e8f15a2c7d4e938cb3ae9a44f7d29b516e89a391d3668c95f23802f0771" name="salt" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="a05b8786e6860187f968df7b1c8b56746cc05dd43f93e07b2d10f02aa9516955" name="salt" arch="src">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="a13f9ab749f28a5b1650fd18f64a528b2e92b062ef906d444f71854ecdf73590" name="salt" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="2f1bc50ae95bceec032860368bf10f472fac9419102113f33f252a21641dd637" name="salt-api" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="3c6e5d16a784a15346e5d9a6371b29a1012500a92df4436d7eb1df241ad24dbf" name="salt-api" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="3ace24dae25876c282bf0709eebce9a2b19347410db6951fc93b4e83370c5179" name="salt-api" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="428ee07d106438c4159ce85b8303494684361e5b24dd39e51b2c82bcaa3cf455" name="salt-api" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="4c33094f00f7ffbab50294636e2b204722aa93accf6e4988c42acd381050a952" name="salt-api" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="6a7efed16539b7b37c58704b5c601071d5708bb3828161324a343e39df3aec39" name="salt-bash-completion" arch="noarch">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="7de22a6ff99b4f92147cbdd8f2eef3b1cb442cadf4162edfe1e234939d6aaf35" name="salt-cloud" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="2e91b62fb5291e39e34f92fd750dea709c2b0a6053b0a3a3566f353bb23e19b6" name="salt-cloud" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="d4bac3423df12dc417bbe1d02a343c2ef3fd87eb67d15a948f3a64de9badf176" name="salt-cloud" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="fdc52ad802ef007b0a1152ce0dc3153b42ad9d2e66812392e58c5eab58007de6" name="salt-cloud" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="0a9f5b5e5b411a69a37462751ce0012d57a0adc0924006de51183039658955d2" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="d2cc6a7bf2790cc587644a543d60e64f6a5a3931a7f9a21800003a6733af8438" name="salt-doc" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="c920ad160cde491196906cbfba622a8e2300c8482a0a629e990106c4f8f14fd3" name="salt-doc" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="e6960d494f6a50152d519730455bb55376924a371a95ff1f3b05ad2918499c51" name="salt-doc" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="fcef39b0d5dc05de7657affea79bab0445f32ff791a7be5e412dd09df1e015f8" name="salt-doc" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="3a85e02ffbe76d9c2caae1e4691d2af9f4e0005f774dae5c533c6d708b5f8530" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="5f08fe151ee3b5be3adf1f1454f1bc4dc7f578d9a92d207da5d4cc9129649f0d" name="salt-fish-completion" arch="noarch">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="dbb32cd1914b87279bacf3b4bad4c52c9779308b8f0fd3c96d34f0e22505ea46" name="salt-master" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="8fb26ede04ae19d779a3703ef09e7e8b73b729b513327c7e5bcc95c999423a50" name="salt-master" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="edc3c7e8b94f347ddad4f69e78dae43c759c0772fa68244fd0830e6817774936" name="salt-master" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="c7fd9aca019ddb6961836db21a85600fe7f722b668ce8fe4ba438ab071c32887" name="salt-master" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="1b8a0e4b2e3e5806b10c0348343b9d18e34fcfe0ba41fb28c93ebd81122cbdf3" name="salt-master" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="173eb7dbc40094b44fc1d1e509a3cf14cbf5732d57256ff1a859bf331f7be7e7" name="salt-minion" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="eaa66340229536eed19f6e5a03f4089622820c12ff52305fc6ddfdab5c007af1" name="salt-minion" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="8482defb565cf08076773077bc8a8a1716d47b043353cd4c707dbd39e064b287" name="salt-minion" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="b388855a31534947f767f5c7b6fe7ca0e1c6885ec1d14c4b7797495aaa4653d0" name="salt-minion" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="113d8ab9db31e6d174cde0fdbaa44e1e55ac3f8c269b0b8d21bd5be731fa403f" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="6a82b1e2544ef4edbdd74ef05130545d935ffadcd64677eb0122d679972d345c" name="salt-proxy" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="0d89bb80c10a57520c83ad43310d9a6cffa05e20fb1468905933f8bdfb6a3023" name="salt-proxy" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="a13c833b55f8f0f1d05c416b56a67c5d525ccc67c47d1310be5e99e77aa1bb34" name="salt-proxy" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="8ebe05803576a69f8f8104ce1ff64e871476cab6c0240d4230d945fe9898e2e1" name="salt-proxy" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="fa2bb7ba007545a0371616c1b44f38f462cb5a8904549cea06afc539111a2662" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="cb1a18216127f2e1a58be2ec179751bdc3a87c83f90f33b1661c9fe5dbf9a4fd" name="salt-ssh" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="c95953d66e0553da527c0c10af5e3f160f980a75e01d8ef52c1a5687e6358104" name="salt-ssh" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="2ad75b23c16a2053ad8276bb115d01e44a44fc9d0d9707b70b46f83bc5d9c37e" name="salt-ssh" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="ea671358aa47b18f30eedb0c097164fca9a1108de6ced302d64a3cb6e919e70a" name="salt-ssh" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="b15ec067bfc5c983d141e0a9fed8bd5636f2e14a2769ed986c95b19be4c5ddbe" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="41f981319d95f3582b88982458bba95ed407fe9b3fb85042543ba9d07aeef547" name="salt-standalone-formulas-configuration" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="6e100e882df11dbf15cf8b8b9be2dec1b8ec7c7ef93fd3da1bfcc7c3fe839683" name="salt-standalone-formulas-configuration" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="ae260ffcd2688ebe81124fc03cee34a01089d6b84b9e524fa7cc85147d5e0f3e" name="salt-standalone-formulas-configuration" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="654dce6578cfba012305b7db41239113cea9e1655cbdace5572d4a6d2c6874d8" name="salt-standalone-formulas-configuration" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="0d4a785898f1c440b5cf4754546801b2f205b31ce5847adc49ba8aac38340766" name="salt-standalone-formulas-configuration" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="88d228c4ff4a97c0fd11e9038942d195737a9eeaba7744f82e6c210be5d4547f" name="salt-syndic" arch="aarch64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="678fc0c448060e94a2a2e38481b8e47b190e6e47397b27db6e0f6f9d30fb12e6" name="salt-syndic" arch="i586">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="8fc03bd431bdb1150a5cd3b3c1be3a33dd681e6daf56f9dad619718c40007505" name="salt-syndic" arch="ppc64le">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="f527918409024a10bdf627970c816db088633907b6782d89c213684f64a53ca3" name="salt-syndic" arch="s390x">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="bce92f003d72f6f06fe27b2b53f041da6fd3cea63d10447efe2ed3f165482566" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="be4b8916b80f3de38c9a2dba78400b912af926ccaf08c03faabd742b7600a5df" name="salt-zsh-completion" arch="noarch">
  <version epoch="0" ver="3000" rel="5.91.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1600862400">- Invalidate file list cache when cache file modified time is in the future (bsc#1176397)
- Added:
  * invalidate-file-list-cache-when-cache-file-modified-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601899200">- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding
  file or block disk (bsc#1175987)
- Added:
  * xen-disk-fixes-264.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1601985600">- Fix for grains.test_core unit test
- Fix file/directory user and group ownership containing
  UTF-8 characters (bsc#1176024)
- Several changes to virtualization:
-   - Fix virt update when cpu and memory are changed
-   - Memory Tuning GSoC
-   - Properly fix memory setting regression in virt.update
-   - Expose libvirt on_reboot in virt states
- Support transactional systems (MicroOS)
- zypperpkg module ignores retcode 104 for search() (bsc#1159670)
- Added:
  * support-transactional-systems-microos-268.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * backport-a-few-virt-prs-272.patch
  * fix-grains.test_core-unit-test-276.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch</changelog>
  <changelog author="jbreuer@suse.de" date="1602072000">- Support systemd versions with dot (bsc#1176294)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590400">- Drop wrong mock from chroot unit test
- Added:
  * drop-wrong-mock-from-chroot-unit-test.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602590401">- Do not break package building for systemd OSes</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1602676800">- Ensure virt.update stop_on_reboot is updated with its default value
- Added:
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1603195200">- Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867)
- Added:
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604318400">- Properly validate eauth credentials and tokens on SSH calls made by Salt API
  (bsc#1178319) (bsc#1178362) (bsc#1178361)
  (CVE-2020-25592) (CVE-2020-17490) (CVE-2020-16846)
- Added:
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1604577600">- Avoid regression on "salt-master": set passphrase for salt-ssh keys
  to empty string (bsc#1178485)
- Added:
  * set-passphrase-for-salt-ssh-keys-to-empty-string-293.patch</changelog>
</package>
<package pkgid="a69ec5bfa8fe879d9c67501499c879dddf69a18cd44c06a2f5f9eed1af578d10" name="samba" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="30f12acef4eca40daa84eedecfbeb681dc7f8b1bcf175310da95532bbe9044c4" name="samba" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="815c71497f1f559c0fbe2eb568ccff5bf123793cb7bee07f81e365827689a43e" name="samba" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="211bcfc5c131144cbc488851c82fe596ce781f3d9779bb34ed76737debe158bc" name="samba" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b4ba3fa988403cd308b292ec95c6760eae437a5e055024e68b34304f5ca0a6ce" name="samba" arch="src">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e6c02177df56668893c6f410bb5864a80a8a7faad2fa8e958a77a62f2dde0825" name="samba" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7db3718ba2a711da8939bbd4c8562affe53b6bb7dc87ae31ca2574929d4f91ee" name="samba-ceph" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="766784b86171b3c1d0416bff21a8aedcf588249199423ce9720099dc59e2e390" name="samba-ceph" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="20d99fd56eac63856fe47d4ea1b0d3888b32c4622abe2d81c36a82811f540824" name="samba-client-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="1f8a6e1954b20f660ec46f6383b3526dfeb63aa381e10ac201f0d30a3f5463ce" name="samba-client" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="54336e76cefc210086e12ad5855a8374cb5cce0e60841930339d36f1b2817a5c" name="samba-client" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="13b8059b3a290301737746d61247f2db8e598a4ed5b1caa3082022284db7c773" name="samba-client" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="b48c38965cfb15bcf62f00af27d832551dd1064bee21ef94857540164d32ab3d" name="samba-client" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="367e2a61e6760021425156a50e1f359b5d9d83db3fb66733b56a848fd0f2db52" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="104ff3b719b6e8e66357188ffbc09c9a4c07f48586477b9891c575697fac3505" name="samba-client-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2180e3be90a8a8c9dbc9042cbaca68f80b6a2dffa49d8c4adc18b381d70255ae" name="samba-core-devel" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f1a4e8f64b4dc320cf74ba7d537fb0413dec18ad85cad78f8d1c8fc8f753c6b2" name="samba-core-devel" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="133ef73767574ed96958a443c50b36b9eac164aab893615bbd033d7489c82592" name="samba-core-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="8baab35d6c7e717ed5db93b6146136fdb1352f6061de38bb1eecc26d7efa6d5a" name="samba-core-devel" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2eeb3b77a07954be8592eee8bf9493782628b49f9a423eb96a483947347d9226" name="samba-core-devel" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="12303f8b484ebb70fe17beac658fd618f1d2a3b573889304f32d979a14674e20" name="samba-doc" arch="noarch">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="94791335c5fc3017385e44410470af2b5a60889b82118df48374a622ca481acc" name="samba-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e0133dd342b98e77ab077dc78efd5c40664d08231ec8ccd97006400cbe05949b" name="samba-libs" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fc2ae88b8b96dac27a3bb263741b9c434951f305a1f1e3a0bdd4a0bc09f19f59" name="samba-libs" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fa9f9dde43f01f1d03cbce6bb772ebf18038cb4e318b46c84783594a86ce2478" name="samba-libs" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f69858464f95ab8f6a06fb13fd1919ae7a4abe873872039fbbf942f2bbee3929" name="samba-libs" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="54557a60d56493043dc69e104a5831f4e6ba1fabe7f73f27617ae89555aa351e" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f4afeffc8b0884802e1457c92191a8b9b23971a735a3cfcd8d6eea846f320257" name="samba-libs-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ef405d21d1947532df741025ebb048a6126805dded4c7a13f4e91db93bf823a7" name="samba-python" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="fa43c7b776fed0a925963361ad665c5f7002c3be83955aa5a9aa546161df200a" name="samba-python" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f59528294342acc686516560bc0c7ab82d7ac2157c90f8c856d4789f1ced166f" name="samba-python" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="973a19466e76616bbf4bae57d0b9b31dff453fe7d570b331703ba5aead7095e3" name="samba-python" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="7f46a092732261f9d9237d6cc75eacc7e0a4e6aabad570fcf564e0514f86e03b" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="46f6916b12782d75d441ad1b83185df8c56bd128e1fb0318ac8476411e729127" name="samba-test" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="4db3289ba4f0859f4c63e5f5148f241e2cf0cfab6ae070d65f39d12c73316965" name="samba-test" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="f2b69c078d2113e0621ef7948c5ad2a056d1b43b0f006010e32c7f2426b4d3fd" name="samba-test" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2621bf54af7f4402caaee85182ebe54169ad23e59dbef2c30e9733a254ca6bad" name="samba-test" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="cfa6e678c110284055b1071ae61d0521ec304a3801ef87477ad54caaf38a6fcc" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="ff8d7074c6a6753de263ef3576191f0db6781afe4d2c8a043e1f3631d52fb001" name="samba-winbind-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="3ff921ce3dfc68d99c0cd2a195892a728a0e7792f41fd0ebcf83dc12df0c83d6" name="samba-winbind" arch="aarch64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="1f2db5a46cbda4a37df3426cf653c3f44b69c9da4ef07095a5d606cbcf9c57e1" name="samba-winbind" arch="i586">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="d607f732eba9fa8fd09d4b7c473d9771507058c5721d30188652db1cd4d85988" name="samba-winbind" arch="ppc64le">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="363c62c9f9eaecef986efab7f017ff92ac0f0d39c1f7fe29099af616d2999754" name="samba-winbind" arch="s390x">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="1f2fb7bc73a21ccb6e1ad2b180b98e688cb6cc92612c8f107484724326a34b6f" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="e9ecdb741f85433f56bd0bb67cef0cd8433f39bdb0c731921c1f53a23913f1fb" name="samba-winbind-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.7.11+git.280.25dfd9a947d" rel="4.51.1"/>
  <changelog author="ddiss@suse.com" date="1557316800">- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).</changelog>
  <changelog author="nopower@suse.com" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="nopower@suse.com" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="nopower@suse.com" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="nopower@suse.com" date="1579003200">- CVE-2019-14902: Replication of ACLs down subtree on AD Directory
  is not automatic; (bso#12497); (bsc#1160850).
- CVE-2019-14907: server-side crash after charset conversion failure
  (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1592827200">- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bsc#1173160); (bso#14378);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="nopower@suse.com" date="1600257600">- CVE-2020-1472: Unauthenticated domain takeover via netlogon
  ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2
    against
    unencrypted passwords; (bsc#1176579); (bso#14497).
  + s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure
    configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge;
    (bsc#1176579); (bso#14497).
  + libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no";(bsc#1176579);
    (bso#14497).</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
</package>
<package pkgid="2ed39d4506f9c9ecad332df5ce1a5673caf752495020f137f47915cdbd53de63" name="sane-backends" arch="aarch64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="e92516fcce48491dad5b9fc5896c845ae4e56edb298a7e0624458ff9f928b367" name="sane-backends" arch="i586">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="b88ba41baa1b78ad95154883bb72c5fd66a9df2e4e4b19b3659c667d800ca42b" name="sane-backends" arch="ppc64le">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="ef92ca4edffa0252663aefc8cc21556bd28a62b405c0c40e4bedfdafb1226535" name="sane-backends" arch="s390x">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="fe811f3b1d42f266ad11988fcf864dfe60927bdb41f59d4f089e192f2e44f19d" name="sane-backends" arch="src">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="15515049098360990aec56dd1c71188ddd97b5151f170b30a777939a0ff8cc9f" name="sane-backends" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="796309bf6dde21ffa06014f5ccf33acce89abe285a9e384c5df5cafa4d72a93c" name="sane-backends-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="20e994267c6f76269be226eba4cc953d676a2e92d544e6b6aa39a64e0a694c37" name="sane-backends-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="c48225f111d3cbd90fb2801dfa10c13c9976ab9d6d948470d9c62ab7e2a93fcc" name="sane-backends-autoconfig" arch="aarch64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="29f6e8781636d0f93ff1a200a0725e321baaa09988720efa01e911b5d9a998ad" name="sane-backends-autoconfig" arch="i586">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="4243287d7e1e99efd7b0e4cd64b793e54640ea4f0ee978ef0ec82cbc0d1a7b00" name="sane-backends-autoconfig" arch="ppc64le">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="c1a746c51b06175688a89a516a97955d5100a744d2a157a1397913abab3a7e51" name="sane-backends-autoconfig" arch="s390x">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="88adddcf6bc23796d316b47c7a06073496bc2b042312bfcbc709530f917b6467" name="sane-backends-autoconfig" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="563dc5457fcc32daa7651aae4d9af319940477ba588e870ca4ddb55d8062546a" name="sane-backends-devel" arch="aarch64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="3e9634e80e8311c2187628d2d270bede95e2468eeea202008a225d3e9f2dccc3" name="sane-backends-devel" arch="i586">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="c4449fe1909df34025765ddd9d05b51327759562e6cdbd57d232caa23e4c6f70" name="sane-backends-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="fa806018c62c59c9419720f20e00cb1f434c500a0c8001b67c6eb4dccb1b7da6" name="sane-backends-devel" arch="s390x">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="03b11869a76fd87cffcd5b2714fdb35e0b7b023ab220ea64776c1498dda930d1" name="sane-backends-devel" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="b6d272a6993b512e7876af89a43c7af1f0cb6461748c820486adc68b473b5156" name="sane-backends-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="42adda32f2e910fa7104fb3b75f622fc5a73e6b41ea42d545e7286a1811478c7" name="sane-backends-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.0.31" rel="6.3.2"/>
  <changelog author="jsmeix@suse.de" date="1488283200">- CVE-2017-6318.patch fixes CVE-2017-6318 which is about that via
  access to saned some opcodes could leak uninitialized memory
  back to the requester allowing information disclosure
  of memory content in saned (bsc#1027197).
  In general regarding "access to saned" see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1495627200">- Upgraded to sane-backends version 1.0.27:
  There is no 1.0.26 release of sane-backends.
  That number was skipped so that the SANE upstream
  development version numbers would more clearly be
  an extension of the prior release.
  Changes since 1.0.25:
  * Significant enhancements to canon_dr, epjitsu, epsonds,
    fujitsu, genesys, hp3500, pixma and xerox-mfp backends.
  * Minor updates, bugfixes or scanners added in several backends.
  * 30+ new scanner models supported.
  * Made libusb-1.0 the default for USB support.
  * Switched code from C90 to C99 (Thanks to Volker Diels-Grabsch).
  * Updated Linux USB3 workaround:
    The Linux USB3 workaround which was added in version 1.0.25
    is now disabled by default. If you have difficulty using
    a scanner which previously worked, or intermittent scanner
    availability, try setting the new environment variable
    SANE_USB_WORKAROUND=1
    before starting your frontend.
  * Documentation and translation updates.
  * Bugfixes (Avahi, threading, USB, ICC/PNG/JPEG, etc).
  * Reduced compiler warnings, improved code:
    A special thanks goes to Olaf Meeuwissen for picking up
    the janitorial duties in sane-backends. He has found and
    fixed a large number of long-standing bugs, curated the
    SANE upstream bug tracker, improved the build scripts
    and docs, and provided user support.
- CVE-2017-6318.patch is no longer needed because
  the issue is fixed in the upstream sources.
- dell1600n_net-fix-strncat.patch is no longer needed because
  the issue is fixed in the upstream sources.</changelog>
  <changelog author="nmoudra@suse.com" date="1497614400">- Deleted xinetd service in favor of socket based activation
  via systemd unit files saned@.service and saned.socket
  see https://build.opensuse.org/request/show/504186</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add a 32bit devel package for use in wine32 bit builds</changelog>
  <changelog author="jsmeix@suse.de" date="1521633600">- Drop BuildRequires for libieee1284-devel and libieee1284
  which is only needed for some parallel port scanners
  but parallel port scanners are no longer supported
  so that the backends canon_pp, hpsj5s, and mustek_pp
  are no longer provided.
- Fixed installation of systemd unit files saned@.service
  and saned.socket that enable socket based saned activation
  which replaces xinetd (boo#1074054).</changelog>
  <changelog author="jsmeix@suse.de" date="1523534400">- Replaced the non-working saned@.service with the simpler kind
  according to the second template in "man saned" of the therein
  described "systemd configuration for saned" (boo#1074054).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1582200000">- Update to 1.0.29:
  * Backends
    + adds an escl backend (theoretically supporting all AirPrint
    devices with a scan unit)
    + adds support for 23 new scanner models via existing backends
    + significantly changes genesys and pixma backends
    + fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2,
    plustek and xerox_mfp backends
    + fixes all compiler warnings on Debian 10 (#120)
    + fixes portability issues for uClibc-ng and MacOS builds
    + adds support to record and replay USB I/O traffic
    + adds timestamps to debug logs
  * Frontends
    + fixes a 32-bit arithmetic overflow issue in scanimage
  * Documentation
    + updates translations for British English, Catalan, German,
    Ukrainian, Valencian
    + adds scangearmp2 external backend descriptions
    + updates hpaio and utsushi external backend descriptions
    + adds the ChangeLogs/ directory to the source tarball (#103)
  * Build
    + additionally requires libcurl and libxml2 to build the
    escl backend
    + requires libxml2 for USB I/O recording and replay
    functionality
    + re-enables pthread support for backends that use its API
    directly, irrespective of the pthread_t type (#153)
    + moves genesys and pixma backends to a directory of their own
- Update to 1.0.28:
  * Backends
    + adds a ricoh2 backend
    + adds support for 40+ new scanner models
    + significantly changes canon_dr, fujitsu, genesys, gt68xx,
    + hp5590 and, pixma backends
    + fixes bugs in as6e, avision, mustek and plustek backends
    + fixes scores of compiler warnings
  * Frontends
    + adds, changes and removes options for saned (see man 8 saned
    for details)
  - adds: -l (listen), -D (daemonize), -o (once),
  - e (stderr), -u (user)
  - removes: -s (syslog). Use -a -d level -o -f for the
    old behavior
  - changes: -d (debug). Use -a -d level -o -f -e for the
    old behavior
    + saned now cancels scans if the data connections appears to
    have gone away (after 4 seconds by default, configurable in
    saned.conf)
    + adds --output-file option to scanimage
    + adds --help option to scan-find-scanner
    + changes sane-desc to create relative hyperlinks
  * Documentation
    + adds translations for Catalan, Hebrew and Valencian
    + updates translations for British English, Dutch, German and
    + Ukrainian
    + marks unmaintained backends as such
    + documents USB workaround in sane-usb manual page
  * Build
    + requires a C++11 compatible compiler for the genesys backend
    + requires a JPEG library when building the pixma backend
    + fixes unneeded linking when not using preloadable backend
    support
    + disables pthread support for systems with non-integral
    pthread_t type
    + normalizes trailing whitespace in source code files. If you
    have local patches that no longer apply, have a look at the
    whitespace ignoring options of patch and git apply.
- Rebased patches:
  * sane-backends.builttime.patch
- Dropped patches:
  * no-descriptions-external-hpoj.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1597752000">- Update to 1.0.30:
  * epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory
    management issues found while addressing that CVE
  * epsonds: addresses out-of-bound memory access issues to fix
    CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083),
    addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084)
    and disables network autodiscovery to mitigate CVE-2020-12866
    (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864
    (GHSL-2020-081).  Note that this backend does not support network
    scanners to begin with.
  * magicolor: fixes a floating point exception and uninitialized data
    read
  * fixes an overflow in sanei_tcp_read()</changelog>
  <changelog author="jsmeix@suse.de" date="1600862400">- Upgraded to sane-backends version 1.0.31
  Changes since 1.0.30
  see https://gitlab.com/sane-project/backends/-/blob/master/NEWS
  Backends
  * adds the canon_lide70 backend
  * avision: adds support for the KODAK i1120,
    fixes thread cancellation issues,
    disables exposure option for non-filmscanners
  * canon_dr: improves error reporting
  * dmc: fixes compiler warnings on the scan area options
  * epsonds: rewrites the network I/O following changes
    made to the epson2 backend in 1.0.30 to fix security issues.
    Network support is still unsupported.
  * escl: adds ADF support, fixes many minor issues and improves
    error handling. Now also supports devices behind a proxy
    (needs explicit configuration).
  * fujitsu: adds support for the fi-800R and a card scanning
    slot, fixes a bug when reading hardware sensors on the first
    invocation. Adds USB IDs for fi-7800 and fi-7900.
  * genesys: adds support for the Canon 5600F, Canon LiDE 90,
    Plustek OpticFilm 7200 and 7200 (v2), 7400, 7600i, 8100
    and 8200i. Fixes several issues with the Canon 8600F.
    Adds 4800dpi support for the Canon LiDE 210 and fixes 3200dpi
    flatbed support on the Canon 8400F. Adds an option to fill
    dark calibration with a constant. Adds transparency support
    for gl847 chipset based devices. Fixes CIS scanner support
    for gl842 chipset based devices. Removes lineart and image
    enhancement emulation support.
  * gphoto: supports the PLANon DocuPen RC800 (with a recent
    enough version of gphoto2)
  * gt68xx: modifies scan cancellation behaviour
  * hp5400: adds button support, fixes a scan cancellation
    crash issue
  * pixma: add supports for the i-SENSYS MF440 Series and untested
    support for the PIXMMA G7000 Series and GM4000 Series as well
    as the i-SENSYS MF720 Series.
  * plustek: fixes a potential buffer overrun
  * test: adds gamma options
  Documentation
  * removes the SANE Standard. This is now maintained
    as a separate project at
    https://gitlab.com/sane-project/standard
    HTML and PDF versions can be found at
    https://sane-project.gitlab.io/standard/
  * adds and updates information for multiple supported and
    unsupported devices
  * translation updates for British English, French, German,
    Italian and Ukranian
  * scanimage: documents the JPEG compression level
  * minor improvements documenting build requirements
  Build
  * removes the --with-api-spec option from configure
  * replaces the --enable-avahi option with an --with-avahi
    that defaults to enabling if possible. If the option is given
    and the required support is not available, configure will
    exit with an error.
  * improves checking for libjpeg version dependent requirements
  * has been made reproducable (upstream issue 228)
  * fixes build issues on MinGW
  Miscellaneous
  * various fixes and improvements in the USB record/replay support
  * fixes a file descriptor validation test in sanei_pio
  * adds missing include in sanei_usb
- sane-backends.builttime.patch is no longer needed because the
  issue https://gitlab.com/sane-project/backends/-/issues/228
  is fixed in the upstream sources</changelog>
  <changelog author="jsmeix@suse.de" date="1602676800">- sane-backends version upgrade to 1.0.31 for SLE15:
  * sane-backends version upgrade to 1.0.30
    fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862,
    CVE-2020-12863, CVE-2020-12864, CVE-2020-12865,
    CVE-2020-12866, CVE-2020-12867 (bsc#1172524)
    cf. the entry below dated "Tue Aug 18 15:15:05 UTC 2020"
  * sane-backends version upgrade to 1.0.31
    to further improve hardware enablement for scanner devices
    (jsc#SLE-15561 and jsc#SLE-15560 with jsc#ECO-2418)
  * The new sane-backends version requires additionally the
    libpoppler-glib8 RPM (because of the new escl backend)
    which is provided by the SLE15 Basesystem-Module.</changelog>
</package>
<package pkgid="74a0553dd575de6c6f700af62fb3cb88910ec51a285420d510d6570a0f4910a5" name="saphanabootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.6.2+git.1602608396.b2b12f7" rel="1.9.2"/>
  <changelog author="stefano.torresi@suse.com" date="1591358400">- Fix provisioning of hanadb_exporter in SLE12, where python3-pip must be always installed.</changelog>
  <changelog author="simranpal.singh@suse.com" date="1591790400">- Add support to extract zip,rar,exe,sar hana media
- This change brings non backward compatible changes. The variable
  hdbserver_extract_dir is replaced by hana_extract_dir</changelog>
  <changelog author="xarbulu@suse.com" date="1594814400">- Add hana active/active resources to the cluster template
- Change `route_table` by `route_name` to make the variable usage
  more meaningful</changelog>
  <changelog author="simranpal.singh@suse.com" date="1597924800">- Version 0.6.0
  * Include pillar example file in package
  (bsc#1174994, jsc#SLE-4047)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600776000">- Version 0.6.1:
  * Remove copy of config files for exporters since we use /usr/etc</changelog>
  <changelog author="simranpal.singh@suse.com" date="1600948800">- Change the default 'hana_extract_dir' hana media extraction location</changelog>
  <changelog author="simranpal.singh@suse.com" date="1601726400">- Update SUMA form.yml file and prevalidation state with latest changes in formula</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602158400">- Update the SUMA hana form metadata, to show hana form under SAP deployment group</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602417600">- Fix the hana media extraction and installation logics when using exe archives</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602590400">- Version 0.6.2:
  * Update the package version after SUMA form update and extraction logic update
  (jsc#SLE-4047)</changelog>
</package>
<package pkgid="2e8973f6cd68af26136f3d0389b5fc760a4c34b94ca55f562b397555e59a7315" name="saphanabootstrap-formula" arch="src">
  <version epoch="0" ver="0.6.2+git.1602608396.b2b12f7" rel="1.9.2"/>
  <changelog author="stefano.torresi@suse.com" date="1591358400">- Fix provisioning of hanadb_exporter in SLE12, where python3-pip must be always installed.</changelog>
  <changelog author="simranpal.singh@suse.com" date="1591790400">- Add support to extract zip,rar,exe,sar hana media
- This change brings non backward compatible changes. The variable
  hdbserver_extract_dir is replaced by hana_extract_dir</changelog>
  <changelog author="xarbulu@suse.com" date="1594814400">- Add hana active/active resources to the cluster template
- Change `route_table` by `route_name` to make the variable usage
  more meaningful</changelog>
  <changelog author="simranpal.singh@suse.com" date="1597924800">- Version 0.6.0
  * Include pillar example file in package
  (bsc#1174994, jsc#SLE-4047)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1600776000">- Version 0.6.1:
  * Remove copy of config files for exporters since we use /usr/etc</changelog>
  <changelog author="simranpal.singh@suse.com" date="1600948800">- Change the default 'hana_extract_dir' hana media extraction location</changelog>
  <changelog author="simranpal.singh@suse.com" date="1601726400">- Update SUMA form.yml file and prevalidation state with latest changes in formula</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602158400">- Update the SUMA hana form metadata, to show hana form under SAP deployment group</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602417600">- Fix the hana media extraction and installation logics when using exe archives</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602590400">- Version 0.6.2:
  * Update the package version after SUMA form update and extraction logic update
  (jsc#SLE-4047)</changelog>
</package>
<package pkgid="6eea8749f6e54be8226f302ee08515b9705a8def7a58d051515c10663e620f85" name="saphanabootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.7.1+git.1619008686.8600866" rel="3.11.1"/>
  <changelog author="simranpal.singh@suse.com" date="1602417600">- Fix the hana media extraction and installation logics when using exe archives</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602590400">- Version 0.6.2:
  * Update the package version after SUMA form update and extraction logic update
  (jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1603108800">- Set the native fence mechanism usage for CSP as optional</changelog>
  <changelog author="simranpal.singh@suse.com" date="1605096000">- Add support to extract and install HANA Client sar packages</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606219200">- Add requisite of hana installation to subsequent salt states</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606910400">- Start the saptune daemon service</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.7.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="xarbulu@suse.com" date="1614945600">- Fix how the HANA client options are handled. Now, if any of the
  HANA client option variables are set, they will have preference
  over the database option (the platform and extracted options)</changelog>
  <changelog author="xarbulu@suse.com" date="1615550400">- Fix the HANA sidadm usage to transform to lowercase some states
  managing the sudoers file in ha_cluster.sls state file
  (bsc#1185090)</changelog>
  <changelog author="xarbulu@suse.com" date="1616068800">- Version bump 0.7.1
- Implement the load balancer use case for GCP in the cluster resource
  agents template</changelog>
</package>
<package pkgid="e0e0cf6c7174f8ab695ef624e8967101677f8248b6aacb164a7e7295c586e1fe" name="saphanabootstrap-formula" arch="src">
  <version epoch="0" ver="0.7.1+git.1619008686.8600866" rel="3.11.1"/>
  <changelog author="simranpal.singh@suse.com" date="1602417600">- Fix the hana media extraction and installation logics when using exe archives</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602590400">- Version 0.6.2:
  * Update the package version after SUMA form update and extraction logic update
  (jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1603108800">- Set the native fence mechanism usage for CSP as optional</changelog>
  <changelog author="simranpal.singh@suse.com" date="1605096000">- Add support to extract and install HANA Client sar packages</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606219200">- Add requisite of hana installation to subsequent salt states</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606910400">- Start the saptune daemon service</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.7.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="xarbulu@suse.com" date="1614945600">- Fix how the HANA client options are handled. Now, if any of the
  HANA client option variables are set, they will have preference
  over the database option (the platform and extracted options)</changelog>
  <changelog author="xarbulu@suse.com" date="1615550400">- Fix the HANA sidadm usage to transform to lowercase some states
  managing the sudoers file in ha_cluster.sls state file
  (bsc#1185090)</changelog>
  <changelog author="xarbulu@suse.com" date="1616068800">- Version bump 0.7.1
- Implement the load balancer use case for GCP in the cluster resource
  agents template</changelog>
</package>
<package pkgid="c31601a04b61675d13eabf57a119cb5e2402b77d10fe22458895038fa0543728" name="sapnwbootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.5.2+git.1602610350.43801ea" rel="1.9.2"/>
  <changelog author="xarbulu@suse.com" date="1587124800">- Version 0.3.0
  * Adapt the cluster template to use the proper gcp agents
  (bsc#1161898, bsc#1160933)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1587470400">- Version 0.4.0
  * Add Pacemaker resources for the sap_host_exporter</changelog>
  <changelog author="simranpal.singh@suse.com" date="1587556800">- Version 0.4.1
  * Make it optional to install netweaver required packages</changelog>
  <changelog author="xarbulu@localhost" date="1589284800">- Version 0.4.2
  * Fix the shared disk usage in non HA environments</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589544000">- Version 0.4.3
  * Update monitoring settings</changelog>
  <changelog author="xarbulu@suse.com" date="1589803200">- Version 0.4.4
  * Use gcp-vpc-move-route properly using independent route names
  for ASCS and ERS instances
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1590667200">- Version 0.5.0
  * Add support to extract nw media archives
  * This change brings non backward compatible changes. Remove default swpm installer extract directory and
    add nw_extract_dir variable to store all extracted NW media</changelog>
  <changelog author="simranpal.singh@suse.com" date="1597924800">- Version 0.5.1
  * Add pillar.example to package
  (bsc#1174994, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1600948800">- Implement the differences between ENSA1 and ENSA2 versions
- Add the keepalive configuration changes</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602072000">- Version 0.5.2
  * Create SUMA form based on latest pillar and formula data
  (jsc#SLE-4047)</changelog>
</package>
<package pkgid="d9cbb88eb3110890fc73dd97414174eade419e6f96e12ca6f011183049bb7984" name="sapnwbootstrap-formula" arch="src">
  <version epoch="0" ver="0.5.2+git.1602610350.43801ea" rel="1.9.2"/>
  <changelog author="xarbulu@suse.com" date="1587124800">- Version 0.3.0
  * Adapt the cluster template to use the proper gcp agents
  (bsc#1161898, bsc#1160933)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1587470400">- Version 0.4.0
  * Add Pacemaker resources for the sap_host_exporter</changelog>
  <changelog author="simranpal.singh@suse.com" date="1587556800">- Version 0.4.1
  * Make it optional to install netweaver required packages</changelog>
  <changelog author="xarbulu@localhost" date="1589284800">- Version 0.4.2
  * Fix the shared disk usage in non HA environments</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589544000">- Version 0.4.3
  * Update monitoring settings</changelog>
  <changelog author="xarbulu@suse.com" date="1589803200">- Version 0.4.4
  * Use gcp-vpc-move-route properly using independent route names
  for ASCS and ERS instances
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="simranpal.singh@suse.com" date="1590667200">- Version 0.5.0
  * Add support to extract nw media archives
  * This change brings non backward compatible changes. Remove default swpm installer extract directory and
    add nw_extract_dir variable to store all extracted NW media</changelog>
  <changelog author="simranpal.singh@suse.com" date="1597924800">- Version 0.5.1
  * Add pillar.example to package
  (bsc#1174994, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1600948800">- Implement the differences between ENSA1 and ENSA2 versions
- Add the keepalive configuration changes</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602072000">- Version 0.5.2
  * Create SUMA form based on latest pillar and formula data
  (jsc#SLE-4047)</changelog>
</package>
<package pkgid="130ab01ed8c79026fa9ec45ed6a90c0b54b84535d639d043c21b5ca40b386a98" name="sapwmp" arch="aarch64">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="a3cd8424315141d4df4a8b3662eb132e6b60aef81d86a79625a56e1363fd5139" name="sapwmp" arch="i586">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="7c2c1a789e070778cff06c041b58a8930cc5cc74c43238f5f10e4cd2caedfcda" name="sapwmp" arch="ppc64le">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="8971ba7aba6b702739244be5e48970b6dace0c0174816f29b18383666a5f6bba" name="sapwmp" arch="s390x">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="372423e838c43774efa0be3669c3d4b00dcd63464d3a679e5e02bf83073eaef0" name="sapwmp" arch="src">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="6bb15b39b5be9f956741e0528c854d6d5729d25abe4efd3f4ebb92e436bb6e30" name="sapwmp" arch="x86_64">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="dbe7d0cd68507cfd6173f1f814ec12ef1c99d963debc104136a5afc40db6b646" name="shim" arch="src">
  <version epoch="0" ver="15.4" rel="3.23.1"/>
  <changelog author="glin@suse.com" date="1594382400">- Use vendor-dbx to block old SUSE/openSUSE signkeys (bsc#1168994)
  + Add dbx-cert.tar.xz which contains the certificates to block
    and a script, generate-vendor-dbx.sh, to generate
    vendor-dbx.bin
  + Add vendor-dbx.bin as the vendor dbx to block unwanted keys
- Drop shim-opensuse-signed.efi
  + We don't need it anymore</changelog>
  <changelog author="glin@suse.com" date="1595419200">- Update the path to grub-tpm.efi in shim-install (bsc#1174320)</changelog>
  <changelog author="jsegitz@suse.com" date="1596196800">- Updated SUSE signature</changelog>
  <changelog author="glin@suse.com" date="1596715200">- Amend the check of %shim_enforce_ms_signature</changelog>
  <changelog author="glin@suse.com" date="1598270400">- shim-install: install MokManager to \EFI\boot to process the
  pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1602849600">- Include suse-signed shim (bsc#1177315)
- shim-install: Support changing default shim efi binary in
  /usr/etc/default/shim and /etc/default/shim (bsc#1177315)</changelog>
  <changelog author="glin@suse.com" date="1619524800">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"
  + Merged EKU codesign check (bsc#1177315)
- Drop merged patches
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-bsc1092000-fallback-menu.patch
  + shim-always-mirror-mok-variables.patch
  + shim-correct-license-in-headers.patch
  + gcc9-fix-warnings.patch
  + shim-fix-gnu-efi-3.0.11.patch
  + shim-bsc1173411-only-check-efi-var-on-sb.patch
- Drop shim-opensuse-cert-prompt.patch since the openSUSE kernel
  enabled lockdown.</changelog>
  <changelog author="glin@suse.com" date="1619524801">- Also package the debuginfo and debugsource
- Drop COPYRIGHT file since it's already in the shim rpm package</changelog>
  <changelog author="glin@suse.com" date="1620388800">- shim-install: always assume "removable" for Azure to avoid the
  endless reset loop (bsc#1185464)</changelog>
  <changelog author="glin@suse.com" date="1621425600">- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)</changelog>
</package>
<package pkgid="850e5d7cbd687b2574a0f9536ba635e62cc37a5ce5e85ee02912c304f684d0d8" name="shim" arch="x86_64">
  <version epoch="0" ver="15.4" rel="3.23.1"/>
  <changelog author="glin@suse.com" date="1594382400">- Use vendor-dbx to block old SUSE/openSUSE signkeys (bsc#1168994)
  + Add dbx-cert.tar.xz which contains the certificates to block
    and a script, generate-vendor-dbx.sh, to generate
    vendor-dbx.bin
  + Add vendor-dbx.bin as the vendor dbx to block unwanted keys
- Drop shim-opensuse-signed.efi
  + We don't need it anymore</changelog>
  <changelog author="glin@suse.com" date="1595419200">- Update the path to grub-tpm.efi in shim-install (bsc#1174320)</changelog>
  <changelog author="jsegitz@suse.com" date="1596196800">- Updated SUSE signature</changelog>
  <changelog author="glin@suse.com" date="1596715200">- Amend the check of %shim_enforce_ms_signature</changelog>
  <changelog author="glin@suse.com" date="1598270400">- shim-install: install MokManager to \EFI\boot to process the
  pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1602849600">- Include suse-signed shim (bsc#1177315)
- shim-install: Support changing default shim efi binary in
  /usr/etc/default/shim and /etc/default/shim (bsc#1177315)</changelog>
  <changelog author="glin@suse.com" date="1619524800">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"
  + Merged EKU codesign check (bsc#1177315)
- Drop merged patches
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-bsc1092000-fallback-menu.patch
  + shim-always-mirror-mok-variables.patch
  + shim-correct-license-in-headers.patch
  + gcc9-fix-warnings.patch
  + shim-fix-gnu-efi-3.0.11.patch
  + shim-bsc1173411-only-check-efi-var-on-sb.patch
- Drop shim-opensuse-cert-prompt.patch since the openSUSE kernel
  enabled lockdown.</changelog>
  <changelog author="glin@suse.com" date="1619524801">- Also package the debuginfo and debugsource
- Drop COPYRIGHT file since it's already in the shim rpm package</changelog>
  <changelog author="glin@suse.com" date="1620388800">- shim-install: always assume "removable" for Azure to avoid the
  endless reset loop (bsc#1185464)</changelog>
  <changelog author="glin@suse.com" date="1621425600">- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)</changelog>
</package>
<package pkgid="351ac3bb271d16182f89335f9684165248569d989b0eb8f1c669a391b532678b" name="sle-rt-hw_en" arch="noarch">
  <version epoch="0" ver="15.2" rel="3.6.2"/>
  <changelog author="jcheung@suse.com" date="1473422400">- This document was original created by fate#319435 [DOCU] SLE RT Hardware Testing Guide review</changelog>
  <changelog author="jcheung@suse.com" date="1479988800">- Update the Document to 12 SP2
- Remove the "Extension" wording from the document</changelog>
  <changelog author="ke@suse.de" date="1481716800">- Update text and image files (git: 2d6472a).</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511265600">- Update the document to 12 SP3
  No additions at this point</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="jcheung@suse.com" date="1544097600">- Update the document to 15 SP1 (version 15.1) (bsc#1115921)</changelog>
  <changelog author="jcheung@suse.com" date="1571572800">- Update the document to 15 SP2 (version 15.2) (bsc#1154546)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1601380800">- Update the document to 15 SP2 and to fix some issues with
  wrong SP numbers in text (bsc#933411)
  No real content changes
- Correct and simplify spec file</changelog>
  <changelog author="jcheung@suse.com" date="1619697600">- Update the content of the section about
  Determining Latencies with the Hardware Latency Detector (bsc#1185328)</changelog>
  <changelog author="jcheung@suse.com" date="1620734400">- Sync with https://github.com/SUSE/doc-slert from
  pull (#17, #18, #19) and commit#9b7e6e0</changelog>
</package>
<package pkgid="05db27f452d09ce701e99aeb151f7bf71e0a4460e54718a5ee2762c6cc946fb5" name="sle-rt-hw_en" arch="src">
  <version epoch="0" ver="15.2" rel="3.6.2"/>
  <changelog author="jcheung@suse.com" date="1473422400">- This document was original created by fate#319435 [DOCU] SLE RT Hardware Testing Guide review</changelog>
  <changelog author="jcheung@suse.com" date="1479988800">- Update the Document to 12 SP2
- Remove the "Extension" wording from the document</changelog>
  <changelog author="ke@suse.de" date="1481716800">- Update text and image files (git: 2d6472a).</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511265600">- Update the document to 12 SP3
  No additions at this point</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="jcheung@suse.com" date="1544097600">- Update the document to 15 SP1 (version 15.1) (bsc#1115921)</changelog>
  <changelog author="jcheung@suse.com" date="1571572800">- Update the document to 15 SP2 (version 15.2) (bsc#1154546)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1601380800">- Update the document to 15 SP2 and to fix some issues with
  wrong SP numbers in text (bsc#933411)
  No real content changes
- Correct and simplify spec file</changelog>
  <changelog author="jcheung@suse.com" date="1619697600">- Update the content of the section about
  Determining Latencies with the Hardware Latency Detector (bsc#1185328)</changelog>
  <changelog author="jcheung@suse.com" date="1620734400">- Sync with https://github.com/SUSE/doc-slert from
  pull (#17, #18, #19) and commit#9b7e6e0</changelog>
</package>
<package pkgid="cb9dbd275047ebb057ece56ad85c5e34efadd138c7370b4bfe1f05a7edf79a1a" name="sles4sap-white-papers" arch="noarch">
  <version epoch="0" ver="1.0" rel="3.3.2"/>
  <changelog author="varkoly@suse.com" date="1466078400">- FATE#319849: Add selected SLES for SAP whitepapers on the installation medium
- Initial version.</changelog>
  <changelog author="varkoly@suse.com" date="1603108800">- ECO#806 Remove sles4sap-white-papers</changelog>
</package>
<package pkgid="a8b5cd34a837a4b1fc578a913e571b7692e16f450f39768251e65be331ace9a0" name="sles4sap-white-papers" arch="src">
  <version epoch="0" ver="1.0" rel="3.3.2"/>
  <changelog author="varkoly@suse.com" date="1466078400">- FATE#319849: Add selected SLES for SAP whitepapers on the installation medium
- Initial version.</changelog>
  <changelog author="varkoly@suse.com" date="1603108800">- ECO#806 Remove sles4sap-white-papers</changelog>
</package>
<package pkgid="60b44cbf241a039d7fd6831b60bc43b5b78ba30527ba4e6e746fcc27f9f75944" name="slurm" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a59d64eecfa3b226eb1da5bb1a6d718763d6a3d07d2974b52c950b33d1080fd0" name="slurm" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="103c0af1d93093cef4fd5f11be0f3fad30a00d30f4f26d083d4109e60c421c24" name="slurm" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b39d258653ddf324da318d41dfa35b2542c7a8279694596d9e65427c6d041876" name="slurm" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ffaa1ddcf451c901c1957ba9eeecf3a528de8f3d5ce372e16b16bcde933e5155" name="slurm" arch="src">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4662aba8062bf2dd4603b5048429be4d103130ece3b142cd393597dbcfbfd2a9" name="slurm" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="64160747f4fc1deed7add9ac280fbc5e129a138a995f76fc6411f03a67ed5940" name="slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7805615d59d7358d94d9a6da4c24f2e9ccaa0c5e5945c204efcac8f3460b5d4c" name="slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="22ac0c12761f0e3da3e2a7866cf0127171a1fbb99b251f0bcd7b28416d6fe86f" name="slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="33be35cae9f11015959917c85bc11d4b02ec0839f4ef1df36c3a4fa9e7c7622d" name="slurm" arch="src">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fb6f1b81ab8e8de71bccae03a31cc19dda57b3f554d71abd43a9c0abee8572fa" name="slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ecca4c7056324d017656f4b64968ebddfb6d64fbf7abe47774764c3d90f56938" name="slurm-auth-none" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54dc275eb6327f2ff13344178286bdfeb5f40302a2aeea00c82d1a94628d1b46" name="slurm-auth-none" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="361b7b249728bf5853af9394b3d82c6db60d8a324338bb12b3fa296206262367" name="slurm-auth-none" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4b2de4a6927811098916d9390503d57a27cd6f24c1ef9bbd7036df2c8566154a" name="slurm-auth-none" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="59c734257734f7f4e68fb0312f2bb4d605e2e73499c0b1c3838730d788efae6a" name="slurm-auth-none" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="793ceb53a06293f09e9aa24a4c5d9fb5eb2fd172cf184a0566bc8dd174e8f708" name="slurm-auth-none" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7fb4fce4b78b4b1ecf91ae682e13a87033d3e8508e188284c8125c25dbb71834" name="slurm-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e2538d0fae91bb9177808647dab4239495c110356201b54373c9d58ea5bb015b" name="slurm-auth-none" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="71bc3e4b62566e34fce82687ea9014c4610d14826c4a1b963228d0ee2f391603" name="slurm-auth-none" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d495ce173bb507159232268d12181006dedcc969ccd0512ef189d28e0fda737" name="slurm-config" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e613d9c902f58b9d9daecff819a0c99c5e0f3c267d7121ddf9ec75835f8ea191" name="slurm-config" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bebc3f2a57b9730626d1f5b930bf1bda0f4646ac246ec5c63e7fd4c70a86cf67" name="slurm-config" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c461dbbc5db7eedf0c799d8095cfa0184f524f43435672c03846b056534a8f68" name="slurm-config" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="934f897533be1ecf00ac8c589ff9511b63ef818984db9497f1fae41fef4dfb43" name="slurm-config" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e718b47d5faf8ada0f1ac2290cf575bc77023f4c4ca90b845564645f2dd217e1" name="slurm-config" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c8c625f63638c95d4cddf10645600aaa6b0c9dcfb68e2fa771b89cbe27e3bc73" name="slurm-config" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="20dc71dc7dded0db5c09f05807b0bc4593eb7538131a67ef4f7f5be4e895ba92" name="slurm-config" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="90d0274087c665a7825e2a3f28a3809fb55179215b2dfad8b6f518f18a2b3128" name="slurm-config" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ebed2ca0753cc1023b69f5f75c225be0f54a05ccf6eca9c4e68c218462189c8b" name="slurm-config-man" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8a60ca2268d10a8061d1e48ab31830274a6ec173c7a3b4b8fae6020e0b05f73c" name="slurm-config-man" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="240f8a0aa596259f0083348c02d89291091b990e60154dec4b83d67c0abcffbe" name="slurm-config-man" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f889eea14cb34727b6b355bf20d337776146def3759c6a4185c7fa1c59b68cc5" name="slurm-config-man" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="15ae01ced676a2a445dc193f27bdf8c952e30ec1ec1faa15b1b0752b93b2eace" name="slurm-config-man" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1d69e5b507bba1dcd28f371b6f7de5fd2a9f504734cae54de91728e4d5141aa6" name="slurm-config-man" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72733edef271d1b51736920b1a09885d329088fba4e4a075d9b67f5a6364fbe9" name="slurm-config-man" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4ca9a76ce770249e32d143631e7f06e17708c25c1b4e40474928ad89d24c7341" name="slurm-config-man" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="78bd38f2bccd33bfd3a2ef5ff4cfe6548dbc3568db40366eb398f8b19848c50b" name="slurm-config-man" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9e57060c0f9707d04d6ba30c705dd8e41cdbf831ad5c8b4c2b2e439ac7d5f286" name="slurm-cray" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="efb0570bed3b310c71f9bce8c662ff07bedac11965576f554eb1574605aa6091" name="slurm-cray" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="20f3594426c482f0ea6698158893ea418469ca1f6adf9ed0251a4bf1e83f1a97" name="slurm-cray" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="53f0e63b1ce6cbd30babf8cfbe40fc0566e673c2d3596078ca29e91fe708873b" name="slurm-cray" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1ea9ff42bae5b085f310d38e47295d95ea4c53a847209ca8eb4d2a6a575eb8d1" name="slurm-cray" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="39af7c9cedbd06d39afbe146cdd7072ba40d363a9ff7fa6a90b207b6ecc410eb" name="slurm-cray" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="efa67e659954ed12a4777d1c9d19811e2d0427f86a1cbdfc3c4979a8942645b7" name="slurm-cray" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9dcdbfa97aa657f5bfa3a0e5eefe01158d1ccf99b40bc11a74c46ab24a86be62" name="slurm-cray" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fc253bb70af8c262f4898463dc8992401a9e06d80f2bf290ff6e67214ed804bf" name="slurm-cray" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="17dfbb172c63de58e040714a825820698341736c431a8067fc6359acd2f77f3e" name="slurm-devel" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5c680308a43c471b559abe0886d20e7d04cd9babec370978cce981f07f042e74" name="slurm-devel" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e4211b1f5f2ca07e3e4d1c018f9a0e6fe5d06259a2f9c6abbccb44971fadc2fe" name="slurm-devel" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="709eb426f1ad9d318dc32822209f2e4e8c52cbcda2348bd23ebb44aca4174ab2" name="slurm-devel" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0afcfe3deed968576f370c5ca6cdebcd9b6d18d4d11c460790a58d8e8b19bc33" name="slurm-devel" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9f2aaa89175d0460d614be563e6012fff1d963911b0a32089f7bfc03519cba22" name="slurm-devel" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b579cefb0ca5420f31d86bbd060215f579269e5a88d14cf9fcf6c67c16569790" name="slurm-devel" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="789ab84bccd67f5e43934e0191a8efbd9c6e4364a6befff18a4a68592932cfcc" name="slurm-devel" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="aef237febebddaeb67db9fc9d0a937af49975835f5000d5536dd82061f33db94" name="slurm-devel" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72ef04ae6d6adb6fa3a0bf785ebc6a72a9d7ba4479cde3dfdb7952200dfdd15c" name="slurm-doc" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="052385929ce2d7afcb16da170acaff87b14a4775a5a5bb455c1db0ed8fa67eea" name="slurm-doc" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8920e72864d0d77c76748c6e9b49875194c8272c7628cf12d24cc9598cd76fa2" name="slurm-doc" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="99940700004c2d9327564ea3108c0907253af8c55aa684d2d7f4703e8b3c9a78" name="slurm-doc" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="97da2a4b588404975fbef6282d1c62f2a0df23a0957e7c34dfadab1c2030a226" name="slurm-doc" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="da54ddd347550a424a3f996981e45c456daa374e03bc2b0f2255776617af4e1d" name="slurm-doc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dc68a98060dc2ab4df5ac347a0f0c5f3677e870e9420d93d93dd2a50031ec2c9" name="slurm-doc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ec5ac1889609d7b43bb788c75072e539af9b2614a01d4856ea903e9ea75276a1" name="slurm-doc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0e83d1faad9e1ff6ccf3c199b56d9ea90bcd461c7006e4a058ab1598fcec139c" name="slurm-doc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b8b2e2387dc711c0c7e9c542f000bcbccaad6f992c48d01e0917cda5eeb6f8a6" name="slurm-hdf5" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="069addc545499963ea0b15bdbfe63d4d8347a4c905517a2bc7bb997497570383" name="slurm-hdf5" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="17fae367e6f4849985c6e3b3b9b98dc1d02f5d96d358082c3cc50894dde12cc9" name="slurm-hdf5" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="076617a6d6bf4c147ac25ad99f86e3522600bf601611d2f209ea45baa8bca04b" name="slurm-hdf5" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0c8837c63bb50236e6c503054b4bda20f8c97c90d04b75415f7748cd130b6440" name="slurm-hdf5" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9df2ce3781c7d30ee3b5b39b2a2d1c57cacdcdf174ed8b6357f956936aa2bbed" name="slurm-hdf5" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f8060eb618cf79c145e500554537151a2d1c67900a0987040ea7a3698f45c8f4" name="slurm-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="92238eb54c799bb7c013d480977cf4e077162bd74623e78f79eef43835e59abe" name="slurm-hdf5" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="077dce20b08de78b56985c9e6916dfcc4b264e19718953cd90074b795a305231" name="slurm-hdf5" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d64f87810ed351ac6d919f8353a5785a97d626820200106b3fd8a8d8900ea8ea" name="slurm-lua" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="073d45d20fae63c95f3db67b0797f9b1aaf731104f7fc63a53d69943e10fb8aa" name="slurm-lua" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bddc19d3ed69dd66200a6201cb092baff8257366d75d494572c00c6ee32df559" name="slurm-lua" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bb3be3b85cff864f90e062c8aa80c37ba8294017486830c41684af643a4e613f" name="slurm-lua" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e5fb3054b1910f3ac477c58c90188693af7d94f65e77f863a385dccf44c201ca" name="slurm-lua" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f022b2262b5c5f7c8a736d4e2581bd72ca6f56ff1150eab53d770dd6ab05ff7b" name="slurm-lua" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="56ce4d0d73b436dafb9e7ac18237083dac845a9a309988a92091e2d52a881026" name="slurm-lua" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="df3086b6cd3dd1b744267bf6ba227223437f95adc4353e99ead7b47926bcb986" name="slurm-lua" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f6a445f5373581341525cbb7c7d1a5ea572c76f682bde71e1c944ad0a582852c" name="slurm-lua" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="df4116833c2f2cadf3d156c060489c3fb55d497fc4814bacf3c09df1e71ca888" name="slurm-munge" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3753d71aeac010801e8179836310bcab8078573b91296a0508c1e3d6a748afc4" name="slurm-munge" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="703dbc2d34f8dd8b53cb71e283a15dd718d4329a37946bf747319e5a99d87de9" name="slurm-munge" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dbd6f9cad1b5b6147a6d935e8302a665d58e267a39d367aec1aa48e8ab5d8cf6" name="slurm-munge" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1442b8d02867f57f3a6fcac8582d934b06dfac5caa2f6437bb69820fa043b0be" name="slurm-munge" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="70913f38174237f85b0ffe2d6e5b3b91b3142fa227e8adfce5c421ecba15700e" name="slurm-munge" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4efa99fa5bcb64a8babf027eb66983693f83facd19d2e6852802bac2b82b40f8" name="slurm-munge" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2738c3c4e9941f1adfd7aa193d2433e576fa127e33b7f65e2fdc61f2f0086213" name="slurm-munge" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="47fb7adba2cf495d9bbfd62331cf62eddad440e5d7871665a5b5f5d50712f56d" name="slurm-munge" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="aa78eb7e3efc5c3cdea36afa368c84e0830eb89be9232e19fc6fe75ea94b4c58" name="slurm-node" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e06d4755312e3319e635a2944f95411eb61183886d833f4f475567ffed1cc8c9" name="slurm-node" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="10fa9200450c180b0ee51d8c5be518fc93cf1fb4c0a05eabbe085f9978f9b07f" name="slurm-node" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="208368c143c2f7519ff3db55ef736db6090501f4e65b246e600698d789573812" name="slurm-node" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="131674d0424d1a8d0e457f344e9894930baacc321810cc5f0791d5581a708b40" name="slurm-node" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e673fd79b3c0378a96b75a863f967e2e1f857e875bf0f6e70e07e6cf61813dd5" name="slurm-node" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54212ea322b981c82c473e79b306aa26d570eed1bcd53ae16c8d24c60b0957f8" name="slurm-node" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6438e33207ad4642cbe9aa75fbeaa63da5bdfe4a85e7d2e17ff6e2e8256a4334" name="slurm-node" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="41dfb27d48fc036d7285266f990fb63cf3b78efd0efa2aa4fcf8ee41c217f28d" name="slurm-node" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fbc3060b97b2f27dc7c0342ec2b3e86884dce613d611311652f126295650682d" name="slurm-openlava" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a0b928cf665e34c4e18617e4d634d979753f21c80093efde03483f419c5b3a9b" name="slurm-openlava" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="327cd304dd73f7e8ffed09fe1f5a5dd1bba66a69312a311c936cc7a9eebf84c2" name="slurm-openlava" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dcb5b89396e30ed86ec790bf46678cd7073378b5efc84ecff2b273bd5bc0a9dc" name="slurm-openlava" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="018ced7833a4e8ca3098e856940974bc6e306101b0fba5cb7dd414179d407787" name="slurm-openlava" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="04e8fa4f0f3a31979ccb3370e7007776ba6b23c7c097b26ceec01f51c2ce2228" name="slurm-openlava" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="901d9fb150af66b6578b89e9b24e818605bf2d0b06ea2627b7277b150794908d" name="slurm-openlava" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="182ba52b4c97a9d401e5f2932b82aced5b5b9687cc161fc1c0afd99b5867450c" name="slurm-openlava" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b578d96a26e9a1f1275212115db1d58601a857436c01837fbe8ab7f59276dc61" name="slurm-openlava" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f797b7a1d69102da575959f646bfe897e5ac43a653828c49651f2d2e93f8678f" name="slurm-pam_slurm" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1da80fdb8abc143390a4fd5cb99f31ab1a1ea8f5ad11350dce22bd7a98efad4a" name="slurm-pam_slurm" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="79806b3bccf1372b0be06eda2e0a042c724a5f6a37eb0d877c3f8eeb3f69dc31" name="slurm-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f725ce5c3de97cb1aba5fb2e9baed1e5a7eb3cc001624d23536cf343d1112c4f" name="slurm-pam_slurm" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="18760ec674ca0a3c7b43396bed91489dc022cfdf154902cbf8d27bbaa544fdb7" name="slurm-pam_slurm" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6a706e8c0411cd8a965dd0bfc6c0756ca8db3406e30f30d0456aaff997a48ff0" name="slurm-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b0a2ab393679603c6d11b72f2f86dcd4378767be86060aadf086d14620fdf587" name="slurm-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1d09ba38b8eea2874f92d1a4fca4c038ea0eb537c56540085ce8abdc20fe4dce" name="slurm-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2a77806e8b72bd3e3a33084073a5797d7b0ebb9a34f9b4a65c4546b32728559c" name="slurm-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1e4c898d9ebb55a2e9a01599a5086ae3a309d7311409c7c7f9db40a812844ee3" name="slurm-plugins" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="805d3549d3f62f980ffcd518eb9a4c3c680ecc2bbea4d00a35cf92673b4cba7f" name="slurm-plugins" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9ea87dbda1ef4c05dc206555576ac8b48db52c9a32e00e773ce671012fb512f8" name="slurm-plugins" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="db25f600a56e4342687feb2990fa1382a87740e5c096eade9f3d2d453ed2eb2c" name="slurm-plugins" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6a77b0a62254013d8730c2e0132b18e0cedf83168acdecc4622ba0db7466f839" name="slurm-plugins" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bdc57541658306d74c6ed5b3d2ef1d10a36deb40ce01d47c4f6dfcc57a970072" name="slurm-plugins" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ed24723bda73998f2ed7f8b1749e7f9d25ca1fb3f20610013f0af0ebd8d6e1eb" name="slurm-plugins" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a2e906efd55a9df015fc20b9771094c5a73d7474440bd1520c3f08f9ad899b2d" name="slurm-plugins" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b00ab5b1ee7d4ac06cc247246a39be290639ed3e358d4e87009e5a049f640e39" name="slurm-plugins" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cc9450f858cbfb572542a7c927c2ac107a6da56137009331611b2099d31c8585" name="slurm-rest" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b97952a0470871223edfba46f55e13f871efac6126eed65887c1b6fbbb1a2c40" name="slurm-rest" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8b4bd6f4d12a8e110a461bbbf2e7b21be2f01ea04f2eff1e70547f0d5569fcdc" name="slurm-rest" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d9ba5659bf83076f0d7d4655f61b60260d170549530b18cc7d35b21046da61b5" name="slurm-rest" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d6b7a1d038ffd4cd7088c0aa95d0d43179ea0dbdc28e1a243194abed6da7d5e5" name="slurm-seff" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b2b1bc98bdb00a2121d28e9cc35c34c254ac464d189aa74b173e09ce1871d7be" name="slurm-seff" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2be7a9cb05d49a714ce96b9f5a061fbe37b57a3d5789a682ab5a0ee045cc4458" name="slurm-seff" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ac71d9b49616883c56cebd88cca6d529fbda378cdacef9486f7f0b632b8a0911" name="slurm-seff" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9511c569f2b04d17271145f1a6d230c6111a9a838396089472f6cd20122b526f" name="slurm-seff" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8ae0a0a8776ca7f919275afd228eae6f95d7938d2fc816efb80a80a06b709e3d" name="slurm-seff" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1add998e5f5b5c0fa131437456a02fa727b4a85fb0744d2c91094daa43df896c" name="slurm-seff" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5396698f72b40c226b17d6a4f37610d52b598f635b04d2407078de6e67f6ee48" name="slurm-seff" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="eae4b0e0eb7b703df7fcfe103ba1e05c1a4ae531fcc0461dae135e801a392a15" name="slurm-seff" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="77bceaafea7195c85269777787319130bdf770cdbd966dcdc5d9dadb65bfb7c0" name="slurm-sjstat" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="89d4778fdbc29a47c8547913ab4fed26f6b097bb27b77ee26d9ecf992cc1da8f" name="slurm-sjstat" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7bc768d09b1c3c94b39f286906be86031c34b31bfbbba3e569934e4dd8acef6d" name="slurm-sjstat" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d83a4506ec796549ba5c7a40417b89ddb36819440292c52fe51c3b9fcfe09278" name="slurm-sjstat" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9b8c077bbd34e63021af117ab6366d7119140a7fe7be37f843c3fdd2c6437571" name="slurm-sjstat" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8d862699173bc850411c39364e300ef31da25bb2430f31414afe58899ecf5ae9" name="slurm-sjstat" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c7285bc0e47eb55959150ec628ac93c64fbeb24106387565fd0c280049a8f85f" name="slurm-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f28f4b73455cdda4427c3c2202c94f3559554b53732c2c396eecaef345907c92" name="slurm-sjstat" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="adcdab58579cfed1d2656accab9c9eb7e5ac8c35b1864a1036fdfc17ce6a8c38" name="slurm-sjstat" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="47446e81d65922839479d585f15021f28a8ba74073c808234447fff875906b8d" name="slurm-slurmdbd" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7a7c5362f49edd3c7b447e89734a16c8b0ca76bf0feb0e257e172d80bc4c7515" name="slurm-slurmdbd" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6355091154b2eb97ac94747085dbfb97114159e85f507a1c67859fc69b89e064" name="slurm-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="677cc498810abb70e7ff4ebf779cc09463822f29d5261cdf03df2c0999df3890" name="slurm-slurmdbd" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="12c74d39ea60ecafa1c1bdbbcd928ee07d7e81dcd82ee68daabe8140e19f2e46" name="slurm-slurmdbd" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="94e812adb73e299b71789ba8a48d0015100e3292239781eea06c3bc4a24bb81c" name="slurm-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="be6e0801b06b9db3bf7d6165b791a1a8e67b1a6cf8d48b991b4459f92bac13f1" name="slurm-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="419c9c1b652a54a16e9fe7e51876b07fa2d32003823d6171a7b727d7cc2a824f" name="slurm-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="66ad5ec8074eaeb65a168b4ce19eaa8e4ebbab55dd4a45abbea55611b62acc0f" name="slurm-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="39de10c241c4d64cf044ec80f735300222bc63761369f169f0910a947e192f60" name="slurm-sql" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7a06d7e5a772f016eb70dc8820ddb3e417f0a8d845efd085903dc4d62f2da9d5" name="slurm-sql" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2108a958d27597ba38d970363db187bc13e7165b7e7240ede4713ccbd8fa0491" name="slurm-sql" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d69d70634a6cb94ef2723de854a9e19c4b61389ab6d0e1d0dc1891b1b2f3ae76" name="slurm-sql" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2bf78b3a2071338ea087e9003a464509b2396b45de51d96c867b82dadd167dee" name="slurm-sql" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="210f7dea5c739d8a1aa95445f00740bb8730e6f093e5e100488b2ef0c80350c2" name="slurm-sql" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e7f8a75873ada2dbd6c0a692a5768fbaf2dc478a9afd73d2270b81c53b8b1579" name="slurm-sql" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="08a7c2e25fbd2df3e57fbb70e636e9bb66264d5ecce725dd5425a83c91baf46c" name="slurm-sql" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="25202aeb806295b7a65ba49fe7bf1bf4f58351d68f6cfba4425f152aa3056359" name="slurm-sql" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="367dc78e39995413bb780bd124cb2e06b9cc88cc480d2c3032c8eb31392b445f" name="slurm-sview" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="617c995840e75f00a05af6da19c6a83bc18ce8b503ed86e48946946acdb0fb6a" name="slurm-sview" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d768be6fe170ec76e1cc5760963f31d65a0bdb5c5755ff2ebf31f1167d016461" name="slurm-sview" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="537c54568aa560d9cc02ad996c39738866e9ceaedb304cfcd8dea59d7bd6ace3" name="slurm-sview" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="939152a20edc114ff1c2f5943ac3ac37567a57e5658c0ab12251aa76698416ac" name="slurm-sview" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c23ecb25e8d639ef6c7508ab4175bc24fec6d16b6509df5624b2a9747d0a098b" name="slurm-sview" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="435701c573b6e57c54e7412863c0751d8f629566e5fe6f6509e0e1c37b7a9461" name="slurm-sview" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3c94a8b8668a2e8fb7693309ba31af38ad7fe6ae043417e75207e96c69d08aa6" name="slurm-sview" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="13fce3643f4c1eaa455aa2827e183febdfa411628d715966ee73e4d92e66a40c" name="slurm-sview" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="59e511b1c1771825cc1a04b488b843d2055e6d15e0481b97d82b1a03a9f2935e" name="slurm-torque" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c83fee27db19546857072a85de30907e1c5e94996ae4b9587a910e6f37593fc1" name="slurm-torque" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d8ef5008fad23e4c9250da09f49492d2f8018f6eb8aee537489cc135b0cb1332" name="slurm-torque" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="410fb84f199174771a2f71ab2e82d82d02b731de3bc8c1f03246bdc0ed313b06" name="slurm-torque" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c67bfd65a4e9299da6e1934b97d135d97624cd136c0299d05b970939898ba260" name="slurm-torque" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f19b4d2beee2ceb12907e9844e4569d7baeaf334a327bb87eae8422e54a8b302" name="slurm-torque" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fff90b255fde18739ebc5bea9aa5a535ebda5f4ac18c34b16785e6c689e63265" name="slurm-torque" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4a96afd0c9f087d19dfed4a1e70cf0b72503fe860f9617d99727fe1dcc417a02" name="slurm-torque" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="71fa9e331d2750afee47f91e96c85c073e6ac803915398f440aa536ae85fec43" name="slurm-torque" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="11e1aa2e325bd233e26b607420eaba2f4eb17e20e36965fe1805141890da5944" name="slurm-webdoc" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="67fdf05c3f859365ad5deae29ed1eb3c85b8b8e021e5e42646e3b96da7df28e0" name="slurm-webdoc" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5d9769da1571ca8c9fa2356d01f81f92bf10e62fb436f16cdd18cbe33308b5eb" name="slurm-webdoc" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="62e931be3db95c715feb124c37d4d91d903fec9b5f3d9a41f7dadb27a09d143e" name="slurm-webdoc" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4eccb0488c6bc5e799f2f0a4ffc211b4961bfefb17b65cf92537f228cb77b7fa" name="slurm-webdoc" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ef258c38a854118cbefc510f602cd2abeae84ad5d6dd9774e0890f9b0c27eb5c" name="slurm-webdoc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0588371da4281c38ceac1d70798ad0128841dffdde3cc0c82d774b7e229cacba" name="slurm-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ffb7d224cec4945f94100f5c29d110873307b00f5582a84f7da7d58a582085d7" name="slurm-webdoc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d332853b7d756c2144c48eabe4344a36b642aa317785f7391de3a9007c7d2996" name="slurm-webdoc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d59a7a7d3fa3325383b8c62c5e398581b347bc110750cfa6dcbbb1430803efa9" name="slurm_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6be5717cf2b7c81ef75ea28039cef2121c35dfff148f1590bf2fd0358a194a6a" name="slurm_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c847a5411780d9405a3194c2adb24f92e476831d5f140cc681422bad3ecea560" name="slurm_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bb54cf70c2471d897f1b76474cca0369d01dea6737283ee7fd2af3cc1f6df008" name="slurm_20_02" arch="src">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7fe5ea5e4e9e853c8055640fe136d8f52bfea5c91db7acc21c2caa1664885f32" name="slurm_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ec469a2ad8fcec918a080b1c4310c890cce401c2d5e6da70c77bd50f21d3a960" name="slurm_20_02-auth-none" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="49ab08de3dd1a7490f63e6359c872fe1ae9f5f6b3704393227b5c9fb35276a1c" name="slurm_20_02-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d384b60f9d9796b0b8336843df60222f7b9682530d8ef48bb4ff141673d447de" name="slurm_20_02-auth-none" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fb0b86aa1c582fc9c4f8f259b1d99afa2ea73e466a987a399abd171dba8307c4" name="slurm_20_02-auth-none" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a638f6570308de379a0bc49b905a03b660440491a18fb6bb7a7494e25b0c7a6f" name="slurm_20_02-config" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1dad9e7a6ec02553d328ec3b0276cab425bddae9f3e8e2159d7f75131a0a7333" name="slurm_20_02-config" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="65e6dd03b7d477be9bd146417e7e1696bd002983f4e36559032fa193811bce73" name="slurm_20_02-config" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="95bf1b1b73222b9daf11a18c9e8703bc804c4b1d3b0e223c6bebd378b306f20a" name="slurm_20_02-config" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ddf9235a18b66be2771e01677283730336ef8d52028cc92b8cb13ae0c6beef07" name="slurm_20_02-config-man" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="732478b646fdb6bca3359b10e0cfc8c8065eb319ec2e5ef629f6912c27178805" name="slurm_20_02-config-man" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ec5502127b680f5d94d011c968e5114864cca20bfdb2c3a2053ee93eb451d05e" name="slurm_20_02-config-man" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b33754b4106ed8b856c57f196413179ce799729406b100b933d2bcba62591f5c" name="slurm_20_02-config-man" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e671940f10b564f6da302f2e2afa6ef07fe89770d98685a1587cc7cec5d30a42" name="slurm_20_02-cray" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a6233965ef377342f887e26bcebf2b65270f4ef73be371e4651aadf4012980e5" name="slurm_20_02-cray" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b308317eff80579fd0077fc472d37becc49e1c06d316803f2a9a74d26ad10d68" name="slurm_20_02-cray" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="34b32afcd4f941e20dbf736086a9363e3f8d8d20098ef4f1fa21afbe7aa4b7b5" name="slurm_20_02-cray" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="062accb721b368289dc705da3b7b04fa38af16096f5b787821c49c8db9455b2f" name="slurm_20_02-devel" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8f23ce26c6cd900d7cd3e384d80680806e595340d720f3e82e4f10e2c8f420ec" name="slurm_20_02-devel" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9c7f7c33153028c3da289ae6e8078d725c593d3fbb522a811909b7a63e79a685" name="slurm_20_02-devel" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ddeb990688d13ed85314d27db72c0d15a1e4c98761848730d9becded35214157" name="slurm_20_02-devel" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7add2e31c2265c7d599ace7ed1de0b409f23483d8d5b2e99fb920a3fc14e3686" name="slurm_20_02-doc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1553874eab4b6834a43802a2e05b406a6b0ed60e12ce8c7e0b806044db6c1b1f" name="slurm_20_02-doc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="231c9b3f61c35d95a51a364f847956e61d294ff78899ab718bc3194dd207e734" name="slurm_20_02-doc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c34ae2d82dcf2138668ccedf045471b98c5f39563297787de6c3461b3545e6bd" name="slurm_20_02-doc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ca13a0d373ce4b8eaededaabef3745aea4d2dd2734f8e20095e24dba6f1013d3" name="slurm_20_02-hdf5" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="78d8c55f6e0d0ad9f517ec8382947d1c460fc259ed1fdc98166036ae423bc501" name="slurm_20_02-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a3f81038b4350e5f2eb688288c08038025f3ac880f6b27085b4abdcde5e27244" name="slurm_20_02-hdf5" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="032b9959cdecfc9ce287f19165e2ce339654c6be94ab69b52f0c39b34fe563a6" name="slurm_20_02-hdf5" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dc8ae358c091104941e7572ab172d6f901f92a9390b67e45c6f628161de632cd" name="slurm_20_02-lua" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0f79ce7e98afe78e83ab4139de6c009ecd5ff50baef326c69b78649759f4164a" name="slurm_20_02-lua" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7e980ac2339c8ae56416863be35aa859f7193aad89266824d71be3458d9f416b" name="slurm_20_02-lua" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="70ebad9527bc64ca2c59e1c324be1c47917a8b7b65c98e5acd53eb6b2b391540" name="slurm_20_02-lua" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54c25b691ddf7a7955f5d28bb7995ca9516b54f64286eb54706357b0ed62ec67" name="slurm_20_02-munge" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7cc8cccb3f1113803454bb7e608cd8150e2e684419c3214e5e1bc41e91aadae6" name="slurm_20_02-munge" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="97944752afb1a6e27dea9c0546d665ca53e697c7ae6410dcd286bfe172a81c6e" name="slurm_20_02-munge" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3f9a3bf04fe5eef647f83184e20bee17fccbb5e3ce883f697cefd9136adc6318" name="slurm_20_02-munge" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6d5fa93db21a4f42317058601d4c4b016e08f0d600b7e7a0a475e85ac61840d7" name="slurm_20_02-node" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="07aa327e9580dbed461cd564581e5898c2770668afb9fd764694b8e4cc78cdfc" name="slurm_20_02-node" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="005b84fa53391d19654fd40a248989f37ccb76037fbe82f3bc57632cfffd6920" name="slurm_20_02-node" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="48b736713c2e054cb039431b723cfa8f8303d6f5834e27abad1dd7676d2c4678" name="slurm_20_02-node" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="390f4d4bb416b9e300930fca3e6ac845b587e01f4e4b17df366d2d36cf86c4c9" name="slurm_20_02-openlava" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="15762f376e3921d3120354659e04e4083050ac4cdfb649bd3deba6d810658516" name="slurm_20_02-openlava" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6a575949a6ca33f8da05305d30b92e9f76859e82a5fb72871687d258a8522370" name="slurm_20_02-openlava" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="023c4dca3ff7b30dd8039abe870a372d69bf9497bee40a35d56a7ca1353ce77b" name="slurm_20_02-openlava" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4b9b61748ddebe8ffb04d3d0a3c667c940dfc91a67b0e0d08bb5ffb9a5f275b1" name="slurm_20_02-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="56c5b3814ea6066edc51aff6bd47b919f5f0257ca3e75684e48cb79019bff30b" name="slurm_20_02-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cc231f93e815ac664d916c0bdb34e1aa3ae674d0ee880a8d0d5650bbbbeee9fd" name="slurm_20_02-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="906a45be6692d491026e25d4caf705ebe5565d6b820f191368a5abd8859d85ae" name="slurm_20_02-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="200d4f294d7f23b35a53ec699e942c49ba4f71c4fceff3b7315dc00a3432c0fa" name="slurm_20_02-plugins" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9044af3e86821c7513eb681225825af2a76236d163801ac7030b700a14ff0136" name="slurm_20_02-plugins" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="507d672b4c2c1831210d7fe1cafc01740533fc17ff346789e88c9170be2c629d" name="slurm_20_02-plugins" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a26dcd0bd3c8baab588375da70df74a268feaa878e4c3782a0097eb72b152857" name="slurm_20_02-plugins" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="415f1f1fef4d071d7dee8cfbd7338f8cfe18646cf681d191cdc975f573b2e61b" name="slurm_20_02-rest" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9a510391db7873ef2c2487e2eda0d3b8ea26397d7174a510346fbf2f4fed8f36" name="slurm_20_02-rest" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ab2a4995f100a46736119bf96da1834e7df94878feb68babacc04e04ba3a579b" name="slurm_20_02-rest" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4c1348182efc405130023fe7708e77fcad6f3a3f9077fa2c0b76a43cb04f3658" name="slurm_20_02-rest" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d1435bee5f4dd47e6f69b5741c8ba7fc7b535948fd84b101fb4b5a361d8b0909" name="slurm_20_02-seff" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72f01febddd63278fdae43a9425d5c17eb5f85bbe84afbfa99d594d4da164a94" name="slurm_20_02-seff" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="14615ce16ba0b8bd3859551f4ea49c7f890cce81c5edaa0a06f08168bae28b62" name="slurm_20_02-seff" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="63e8dadc640ff57abbcb3c24f3c81aea93b7bf200ad2a4083bc4143bf240888f" name="slurm_20_02-seff" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="afe2e4dc33d45ac7c6389c33ec617c5957d4b6f4b19e5946cec13c117edf807f" name="slurm_20_02-sjstat" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bdf7181405c505dcd0b287d90a64a5722401f3f625bfff363cecc9bd51b66cd5" name="slurm_20_02-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3dffcb70cdfaec9ed8a9ede735cc9025314a517ecb48d7341969017e8a0d464c" name="slurm_20_02-sjstat" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d037ab9a4d6764fb27867e5e67bd9db23b9a0012212a2d273f2705447757e681" name="slurm_20_02-sjstat" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="670706d36ce1b4d424f26115a15026b172bab19cedae59a2f8b15552bb2be506" name="slurm_20_02-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c162d7acf34aa4ccf3a310d1cd5359488c226d8b047b687898a5b9fb64c82a40" name="slurm_20_02-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c894157268be835e30987c6d83e7cf256c3cbfb47ca4e6c32f18520cdaa612bc" name="slurm_20_02-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f3cd583c8bc2182cec5e69861fbe28d4de8df225976a6cd27ff17afce64ffa6d" name="slurm_20_02-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="23716f5d8b97ef7765e18d8edf6938b49e9a2a213f80fa0e9aad7c56bbc6440c" name="slurm_20_02-sql" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="778701998889343be5a67304be00f311b9d196b973cce594d440d072a6198d03" name="slurm_20_02-sql" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="59ad2d93380978c0bbb9a5f356ab9e55538b0e7ccf3059d28e09bac98ae8b9f5" name="slurm_20_02-sql" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d06fb9b1798e20aa65d3fb2045549dc147bd3b4b58439f5e85d73df983459e5a" name="slurm_20_02-sql" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="abe00a2b2b6545dcdd5b9cfe686bfffa71ebbf037f98dfe3eea807dcd393a40c" name="slurm_20_02-sview" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="41ae2edc827db91a129adb89e3114ae4d8ae486d473b8cb1fce3fcf2255b1332" name="slurm_20_02-sview" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0312525b4c35b602ee1707dfae7dadd22d6e00c10aa502b355ea84915cdc7120" name="slurm_20_02-sview" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="782147ca290d689e56c30313a608918fe871caf4804711798c745874fa09ecbf" name="slurm_20_02-sview" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="822a67e7db8750899e73bd89888483b0007d7daa607e7abe38fa65890b023c98" name="slurm_20_02-torque" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="98968d2e096c7742f4774a0ac4ae8cc106538ebe63641eab0c65aac5e015cf23" name="slurm_20_02-torque" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bcf97d8e5057a2c8b261106ac0ed1f637f82ec8e3b5dac607400e7f8997d2fca" name="slurm_20_02-torque" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b3611fe568a24b2be220964b1857ca0ceb20186b0cda30afdc3a9ef6605ac234" name="slurm_20_02-torque" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f74cdbf52394b67e5fc4fd51323b1bb3852794a43c936c306cc9dcc0614ddae2" name="slurm_20_02-webdoc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e7ce7fbe15dc3f3bc80064cb02319f75b53d1e61260ba4eb84375fd98dc606b0" name="slurm_20_02-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c76909b35232b3c91b3b7210f78ce3c5b0d77b243584ee595cfbb2a112e39612" name="slurm_20_02-webdoc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="866f38af077e582f91eff367df98eb7d16cf4d4903f798782e6c03519d77b3e0" name="slurm_20_02-webdoc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0c0defc09dd13f36fe64efd6921387e61d19a09aee117d48fd701c3a62341cf6" name="slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b138cc0612392f0da9c73c2dd83ffc0acc43da7ed05b07807bbceaca8bbf7ddf" name="slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="74503e2112922eafc8f1d44a834094f0603ce4fd7497e925b70679c8b200af2a" name="slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="878f98fbaa1d7d1c2871d5374ccff75983dad741a54e920e4cf98f4c00205d8b" name="slurm_20_11" arch="src">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="986bfd17d6bafa5244b00d927eec9899c3b1945e74397155832c27a3a9292934" name="slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="298b9997b302baf914f8e22cd97d0556d3657fd61c435fe880a6d0e13acf9da5" name="slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="51fdbe445235785d02981f46ec15eb97366f6130cf3d620d32d8c94fa9860636" name="slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="943e62d7716ba7090186b55934cd522a2e40e537a85bd870cf21240a8c727088" name="slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a753a03df1ada8b4c653d99678f38f1685307d527a4be6fea3eb65233dbc8c19" name="slurm_20_11" arch="src">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="957ac698abf01e8828352eab52fe29400c175bba90b85b52ed6ec70d3d10df4d" name="slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7552e1887971dccf04d291ec5abd805e7cd84328269463eb2e1f8af2937f0dff" name="slurm_20_11-auth-none" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="ebc4c4e3a2474d27a9a79d6e2306b327ce2ffeca1f5209be0829601ffb81a6e4" name="slurm_20_11-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="5ae7bc0dce27d6d56dd5a391fa93c66ae9f628a4bec57c3b02a502b323ffc39e" name="slurm_20_11-auth-none" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b562fd38a1f5de29e444391111a4e82d888e1de13f386744cac86eb3569db15b" name="slurm_20_11-auth-none" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="91ce2012445e5ceaa78ba1f3b4398bdb38f4afef3c2b2519b241d1bcd00ef07e" name="slurm_20_11-auth-none" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="797dc5f250bfa10d924a1edcceb9addeff298cb45b138d2f5cac69ea75e0aec8" name="slurm_20_11-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="fcd74c5887df5839e8678d05b38684d0b12c6ce85dbe228ff128fe93fe04e844" name="slurm_20_11-auth-none" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0c89b48d4ee48edb157c9f057ea80653d6aff8d228ef0f4e0ce4441188bfb875" name="slurm_20_11-auth-none" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="22eb86d9eca4e1af313c3107ef8c1fccf1f31d3844e60a974dfb1b71ab17ad15" name="slurm_20_11-config" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d6384cb1e1b2047e099312b7016113c1868c1d4d7dfb9da996f4bff49c5b0495" name="slurm_20_11-config" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="ca4957a4bc153a3d368a0b3ecef05931e723c5cf7256fe2f9aa759179049da11" name="slurm_20_11-config" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a816718ca92b64dfe4022fe5a382417999a2b5c005265cc46e4135bec25d54dd" name="slurm_20_11-config" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8e6103f4dfc2910e8d41272f7bd1b6bbc51f9d6f02d7c05e661626ed0247b5f2" name="slurm_20_11-config" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c7f66840ef5dca04eeccf4b199dbe9a118e88ed911acf4768176bdfef0e0c50c" name="slurm_20_11-config" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ea0f58874b723cc191e0e5011d9f9e86518a645a6eaf88cc444710a700848660" name="slurm_20_11-config" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="243c80a25a5215b911c2c650f641870107da1ecdf0fa37a722eb6f43bdd0d7e8" name="slurm_20_11-config" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="05b7bcb811c93a4a19a6ade6fc999e127655e5eafd31affd68148a67db37e38c" name="slurm_20_11-config-man" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8d46fa6d02a044d170351f221a663c664fb7f6a6a0c37c0d2ddb043f51670ef6" name="slurm_20_11-config-man" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="98ab496e69aff1417e61c9ffc337b068dfd909de6cc333f67296f79ad4dc3ef8" name="slurm_20_11-config-man" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="31275cd0a165fd1ceacdad57bb0de9b324b89e5105c6654b2e1f2a203577ac77" name="slurm_20_11-config-man" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a0eef1065344aea9e0f921c2dc0f73750e4f970f4c37fc22a5be23a549311094" name="slurm_20_11-config-man" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0166d99b8c2d8bfff66f21cc78e4e2479159914ead77387ac2285f8a2d1051f1" name="slurm_20_11-config-man" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="dd0311ce6af39cee9fffb86ec9e96008286bfda5ed9b600dad5668c9ac71eb8a" name="slurm_20_11-config-man" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="af3bd38136dd49f1290436db0f4ca0de3fa5831f875666597e4717cadd01c347" name="slurm_20_11-config-man" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="45c602a725266045ebc9a002e5b7e9e37da42815f53abb167d0e05f1416b90c3" name="slurm_20_11-cray" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="170dcb0906f49297bc57c5dd2b08812742ac2140af3dbe5639f1e6398b9eac16" name="slurm_20_11-cray" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2ab5d00549cac6c19b21270e8eaeb88c200e70114689cd27041b305f9918df2e" name="slurm_20_11-cray" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="ffe1228717bfdd3c14ac1f633aa6d4248539917e5a7d63fe810ef1a14a736d88" name="slurm_20_11-cray" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="07270b8a4a73ba2ce1d5757937e8e7920ce3bffd8eb2393fb411819f22bd2d60" name="slurm_20_11-cray" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1c592739e747b78c15db9072e7c9fcc6dbaa2b2ac651b58ff3fddb2fb432de91" name="slurm_20_11-cray" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d54407e6332000557cfb264d8c9df8c7040949a7a9181a3d8177049786218839" name="slurm_20_11-cray" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7cf2c632170974a763274177779c4e2fd148c0a1208fbecf9bf03a7cd81bda3e" name="slurm_20_11-cray" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3208c2041361fb7a71c516b8476a08ec6d5aee5f9b54668ce87097f0b14b847e" name="slurm_20_11-devel" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="4f7c92245600e0eeb50980eb42db9c62d37331b7218c108bb882c1a38cf61834" name="slurm_20_11-devel" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="63b0471b7c69c02230acdc392db9c84004bcca6dc081649514bb2de76dac549b" name="slurm_20_11-devel" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f3544cd7fefb4e1bea1d11aab49b640bf8903f52daecc406a9d1e8d2df954dac" name="slurm_20_11-devel" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="7e6fdf4e0a19e1815fb24022fbc3bfbc7f5baa0107c03934422327d242c39546" name="slurm_20_11-devel" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7a55835ffa8906e2db08caf7846a1f116ec697683cd5b347ee645cb7c987d7f7" name="slurm_20_11-devel" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3c8500f2f25332fa8dd3cb31146dc1a89d3b87660268f4e83d01662b5ae5fbf7" name="slurm_20_11-devel" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a0a6bce650b1f8c790da1477e791486e143082071a51a13b376150e378c86e1b" name="slurm_20_11-devel" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="f0054fb63bd6be88dc297525053f992171e58c2bc9803804950eb41f2d6879b2" name="slurm_20_11-doc" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b0784e548b3a3494e094fa088abedf88c4ca26b409014217a6c8d519c7a830e8" name="slurm_20_11-doc" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="845ec2e1a0fd257d96f176c7f9af97bc4170e9d14a89f2c2ec2ed029c3f57c2b" name="slurm_20_11-doc" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="63bd18e097350cff3bf17b7099e94c8c92b54cefbd832576254c6849231b7c19" name="slurm_20_11-doc" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="6d32db20ee72bdcdef597ec0a5f67ecad336aa50858f552a9c96c57f6aef0ee6" name="slurm_20_11-doc" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="773c1c1bbcc998e8382c888c5342d6e8fa28ab70f1515ca0417f8b78a6fd63bb" name="slurm_20_11-doc" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7acdb9d40b23dde294f5364b895515f24f504b9bc49f0436acc21f0c39302a73" name="slurm_20_11-doc" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="09a628d21f576aa3e07f176241574d2ff15a21538adf2b205d0523c8427df7bc" name="slurm_20_11-doc" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1b55475d2f243ddf748608399cf54097ad3e0b26889541b8370afb067d08951f" name="slurm_20_11-hdf5" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c890f72c44ee5007a14c27f1c5fba25100bfec7d1b076f848f1e5ca257e0b399" name="slurm_20_11-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="7758ed72d7541fea5f0c8d8c8f3af7d7c1349d13849eedc098de587e39a5cea3" name="slurm_20_11-hdf5" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cd6c6f17d5b266dcfed8588a54437cbc2f4ea11441781e297555b6f8dd96810f" name="slurm_20_11-hdf5" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d3f147a73c2923e6dc612668073ceff0c659a75fef2425154c40329165889310" name="slurm_20_11-hdf5" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ee966c4f899596e4346cf005a4e541455b8485145eac5444b9dd45af228b222a" name="slurm_20_11-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3fa94785361aafd7bc09145a944c1d2e4a0e4e87faa3ccf161f4cb86692dd283" name="slurm_20_11-hdf5" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="4e507bff13aaf4c6c353e47c71418c8f92905fe3a97a127d12e268c9cfb51fa9" name="slurm_20_11-hdf5" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="6e274a1743b2a5c2027641f48dc63ff5c13022ba2e8c019715d3be11e91744db" name="slurm_20_11-lua" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d602fc393836354bfd9670baa2c086cdcc4dbde0b45aeaf80ba85e57295fdced" name="slurm_20_11-lua" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="237b8c9e7d26bc5f7b6c59b1c3ede62dba4007d693925f181f65db029fe968e5" name="slurm_20_11-lua" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2037f9db53e485119a45b291df8b7bb5a014ce54014409b2b7487e714181296e" name="slurm_20_11-lua" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="124797e6b5a34346233faadb787f489a09333be9a76dfc32be69c61a006182eb" name="slurm_20_11-lua" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="dc48e05fa1b663f6c2602f2e50b14ccdc2b0f1950385ab7cef0f9e8295c14300" name="slurm_20_11-lua" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="4198d34d6b93e680ec0f6a87064793a15d619a87d9de7cd8d07cc0add1062a22" name="slurm_20_11-lua" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="27e3c8270547296db2e14fb30de1d0a965a048a328fe3803b07f54508d42a6bf" name="slurm_20_11-lua" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="98f1e46e9480f7d2ce7ae2deab88e39c773b9fb1e5e2da00f93c4ff779db64d9" name="slurm_20_11-munge" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="37d7f0ab73633d524f9b51126834788ba923c06a233cdefb10ab7f4ad76fc284" name="slurm_20_11-munge" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f73135bc8fa47d3f86ef94bc0cc12c195b79454f4967d9c64361a9c4352fd998" name="slurm_20_11-munge" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f317b9fa3baf5f0ef18b144c57b56c98fb83e641ffdc62953a847ff80af6b546" name="slurm_20_11-munge" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0d5fa49b85a28432ee84f8f32df61f721fe5c2637ff8c37e0eac0fff5049e61f" name="slurm_20_11-munge" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d78842f52bbfcf17f2566e1d9b450240b03d0e275e5f76b42502d432ab250ab5" name="slurm_20_11-munge" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="859bacdf7520a8c75b1ae77c4a01418b7a58811cdb8435ffaaa158fe36fa4a92" name="slurm_20_11-munge" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c6a7b3a269a6b8c9919b13e26a72891b117f25f70bae326652dab9d2512b1b06" name="slurm_20_11-munge" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7bfa5c558ec1ca216130e02d4332a543cce010519f045a9b245debcb2c4e16ec" name="slurm_20_11-node" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="4a715cb81a416210d6a0f9c735143bf6ad707744dc8918389281129b303fac0c" name="slurm_20_11-node" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0effd4d502e99c4acd9bf92a11e5f3276dd59e16f9f385e08905156481617337" name="slurm_20_11-node" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cde843748323d4adebd9e8bf072dbf2f29497d8c8dc3d4bb990539030ce7eacd" name="slurm_20_11-node" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="3d4d86cf0b684dc067479637b314aea261547f795a0ab6060c1e6a63b5ed89a2" name="slurm_20_11-node" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="93232fc4c9a1124393f28133c99fc90086d35b9cc157c1aa35c8b4dc04653292" name="slurm_20_11-node" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7f0a0ea1f133b6f78dfd46765d8a46b330593d35b9a876373d7efd8b7398b462" name="slurm_20_11-node" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="99820fa4f331e19312027b3638cd2e19af847214224757e8fd19f29d3e361b50" name="slurm_20_11-node" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="38d8a719470d4f2aaa9d7dc676d4d769b83bd27d5a4df8e4c3b872464216fa0d" name="slurm_20_11-openlava" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="baae0e4230bfbf893827c3e1aa8e13121a6ab4d6e4ede0f984891aae331f7e33" name="slurm_20_11-openlava" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="39f620e24c10d403b69bd2bf17353f1ebba193e510a33e82b719ca201a331723" name="slurm_20_11-openlava" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d0236c234c33ad63a7dd1572aae15e8e6d6fb4a9ba1b9de3142fd53c2f55b6c1" name="slurm_20_11-openlava" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="919f62710a44c39db9a05b455286fdf54af7ebfdd410bd52d2d4dc025e90156d" name="slurm_20_11-openlava" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="bf6decfc6081337470506d8a701414b877d92c7f71776fb8e1f280420e1e7960" name="slurm_20_11-openlava" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a8d788b931c702add1668e7ba03a1b0c96fb417847e095727874740a313b54d4" name="slurm_20_11-openlava" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="72fb45e4bc3a05c459edf6943f655cf7794a0f734394835a8e4ece966280e2ab" name="slurm_20_11-openlava" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3fdbac230d8375ff581ffd8aa6beb88b7c6354dd17b5d453d78b7eb54ca509dd" name="slurm_20_11-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="156b6e41ce9a7718b364fcd379ce4f6f1d65e20bad2424f29d7e735b1f7acd81" name="slurm_20_11-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="37428d850c7a357a076686b881d6676d1435bace44104f8e4944017a4dc5f0af" name="slurm_20_11-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0507177efa40316a1e7e8c921167df1e0768d20d8745c5641334cf8d699c4493" name="slurm_20_11-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0b1c8a228cb140f188fad5690b0e435115cd59f5b47c98d9b978524510f688bd" name="slurm_20_11-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0594f4d7e34abc4c870606ed248d979784d8876539ab8876af9a109382ccf147" name="slurm_20_11-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="597e5d5d98c1f77675290b5f5f3d76194c6e6da5a648b6e2d95b6852ac411571" name="slurm_20_11-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d7a3604149e5e00f8d741d735f2fd319da94afa53dd85e5a3c5acd728f4fb912" name="slurm_20_11-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1d3c8bb8775d092abb94821ca7030722d33b64d29bd932d4d9c3ea234d5e0775" name="slurm_20_11-plugins" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="5e66c75723a53e66f2b00c5505c35d392b532955320ff5bb59320d5f3c172a18" name="slurm_20_11-plugins" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="973d1f59746d6d2997b9be931ff0a0ae356970cb0a9ac563d274ff5bf903be5d" name="slurm_20_11-plugins" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="768af9ec79e8139d58e450b4ece795a36f35d3511d98fad8d48f172a8152cd86" name="slurm_20_11-plugins" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="3a35707277f7a32f4db5004d207e6fbe2ec2fa2ae9e0c3262dec5f71dfe90f4c" name="slurm_20_11-plugins" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="eb9ea574e408a441792eaf08d317ae67a8c1d927e8fc2391b8315af5c54a52aa" name="slurm_20_11-plugins" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d7f6842a91348c0647ee8bbec18572b87630671abbb2763dceec675b3cadb07b" name="slurm_20_11-plugins" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="357316e20f0f2c654af4a4a8e4175219462c306fdce2c4501d0415e928ad5b8c" name="slurm_20_11-plugins" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="f1136cc5e345d45131d4d3ea8210e2df460f97a61da5ca1f40a6a3e668df1bdc" name="slurm_20_11-rest" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="3e00132653cfe548f87100ec118389223549f546f43559234455c3ca5d562519" name="slurm_20_11-rest" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="624fc0a16b6b90b444316b9dc26bdb57c51d4bc81385d27526d0a790fc2f4015" name="slurm_20_11-rest" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a4c195c44d05b121895648e66b3c7c3c8e6083de03cac95c4bfd13646f65b79b" name="slurm_20_11-rest" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="802c55934f41314d693719ed2bee1bd9b306fa4a36cf8811cfadf5061599e889" name="slurm_20_11-rest" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1f1f8394c045e1ea84a7cd8ae0111c7b8be3195986a4f4054ab74c800ae403e8" name="slurm_20_11-rest" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="39c1c31777a53079d7c4d647e52f8907710b0c83818364d0866147a0b6106d88" name="slurm_20_11-rest" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ac8de1e177152dc195bd819ad95724fafa772f47f7f9d2fcd036543d1f8c5390" name="slurm_20_11-rest" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="6fe832af7d8e0c95a8129003b14981465bcd137b81ceae50fcaf61cceefdf7d8" name="slurm_20_11-seff" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="45a78e6c49eb10459106841477acc4714610712a0131b767390b4b48fd4408a3" name="slurm_20_11-seff" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="048ac6ee8c707d9e2f7fc898a821557602dc894405bfe4a35e7217dd993df5b4" name="slurm_20_11-seff" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e39393d7c4bc6bb22ed223a604d3c91d54c1c11d06c6d78c0abca28594a760ae" name="slurm_20_11-seff" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="76f42427fcc683031b7604a67c5fbb36c22e166e70634b1983d5508e12312cdb" name="slurm_20_11-seff" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="72da0f3fe295ff3350c839c3f65b34803490a5116c6f5e6c2e713b533bd3d484" name="slurm_20_11-seff" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="09aa46a22da7fedfb6b1bee61db6915257fa0504cb3772d02b8ed6fc3a7752e7" name="slurm_20_11-seff" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="5bb189e0ac04f57cb62da5509ae1a8dccf058ab9a6f00c4f70f3e7018c09bc21" name="slurm_20_11-seff" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="bf52664d239119ddda2b7b806a8f3c3c5779422ee6140da789b4c7bbee2732ef" name="slurm_20_11-sjstat" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="82a513db5dd35348ec7761b5f7be00eee22a99eb3d571985284be7dcaacde0a5" name="slurm_20_11-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8635cf51a428e6184748c064f80fccb701fa47a19f88dd5d06fb225df78ffb3f" name="slurm_20_11-sjstat" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="500d0771769742d81d85d22dbb3df2642ba5f7faa7b32d207fe4b7901d691538" name="slurm_20_11-sjstat" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f40d24deaf70e1c09bd3344dd0e7620c235399ce41d4732bd25aeae1034702b6" name="slurm_20_11-sjstat" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="8363ed0eb04f448e17a321a7f4973dfb5bf10f7178f75812fb6df95a6a426419" name="slurm_20_11-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3e55024dfde064c78376258b24961a186d09d9bc0d4fd00c7173dab2f2b9c06d" name="slurm_20_11-sjstat" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="5a91db27fde4de91640e892e1123dcf2b2eed861f6d132688bd0dded118054d6" name="slurm_20_11-sjstat" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="b88b8ad6bc7a501c67a90bb99bd939d88786da991c387174a6b06d9e9802d6f0" name="slurm_20_11-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="7a499db833b93da58d89b186aa0001a68a291c544064143419e7171c78bc999b" name="slurm_20_11-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2ef0295e1aa89ce172b71520275edc70fab3ad4a6f2f0c6f87432fb7da4c5674" name="slurm_20_11-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b99fa8cbb260a8e94b89420f20c7fc090099b35ed693ab6a88ae743efbecf687" name="slurm_20_11-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="eac2f62bf9518945985984c47803ec6b123f5fb957802e629fe9eabc6f004962" name="slurm_20_11-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="e51e48b65c48cd2232a735a845f4f6d957235f90eff14e7640150ff28f1a8c1d" name="slurm_20_11-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3dd2d6591fc3432ca8d3dc689a62e099b0dac686b59e756ff6bc89eeec979222" name="slurm_20_11-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a74a39ae79d198a9ba630d0d2fbcd0388522f18f08418e63bd516c7e1415d4ea" name="slurm_20_11-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ca7b3a6f097732a9dc557162d7957405773c4aae9b0757a4cb49c026cc0a5b47" name="slurm_20_11-sql" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="44b9008f71e45369284987415c2b468dc72c4dde57bdd3e19e91a84f7580bb57" name="slurm_20_11-sql" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c1bbe65774dd3fc11f3a28294d3df2db71608bcb1df7cf4992e94ac8e87748ca" name="slurm_20_11-sql" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8ea1be9bd9ca9f1831f6020a3cf3626eaa9a0956ce79939faeb5ecd1d8805240" name="slurm_20_11-sql" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="6e7fbf93713544aad20a01ba349bb0bc8ff4a36f97faea5bbe5244344882de84" name="slurm_20_11-sql" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="e13fd6b0affdb1363ac6582c3991e2a3f0ddaa172d1670fc08f103cf48390e8e" name="slurm_20_11-sql" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="53149ee57a818d2d2534c56ab31273940b4321b8cee78df3f62f49e65615ea43" name="slurm_20_11-sql" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="82ddae8670026b3152a8167f30714af3c5de2cc858884b899d47815a30fc9a8a" name="slurm_20_11-sql" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="8e5525c61e6e1892cc4605a76675593fa7fafae3448de2a0d967861ffc40d87c" name="slurm_20_11-sview" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2783f71d3cb8e735bd5abaa7bec0dbcb912e97376a81002e64c9139d2788061d" name="slurm_20_11-sview" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="fdeb9053058bcadc5710f26db31162b9450f74c500330b2cbb358c04cbe8ebb5" name="slurm_20_11-sview" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8c64492ea4e0c238561c9619919ca3443496db9b5ed16c1d6f7596c76ba20e30" name="slurm_20_11-sview" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="bb1e7b597ad1932751e00661e23fc311536cbe4b443b7d9e8a70031e5eff99de" name="slurm_20_11-sview" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="39c25df1a1cee9494e74bc45eeabbe63daaaac9b245651eb0d79247e11c8a0ab" name="slurm_20_11-sview" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c376da8e148cd0d5e0e91c224cbca1b0f97476abeafcffa8ee3a46e590920e16" name="slurm_20_11-sview" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0c0e3c5fa154cfeb9b90c9f2826f13d5177ae4ce5e5f9456f2aa7ac47b6b5953" name="slurm_20_11-sview" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="9723c111bee0c74871c95ccb7e48b032b9bafa4ca1a266c5b9f7ff7fbdc40a37" name="slurm_20_11-torque" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="fea08193416f295b29d1a246ab006d843677bf8eeb18f77ba94cc6f7be08eeca" name="slurm_20_11-torque" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e959ef241e03720139ebf5a9d1897bfc0f80b2c80f464d9564610aa6f7c801ea" name="slurm_20_11-torque" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="bb189ecaf5b1e15451bacd25dc90e36bfcf5a54f14b153e0729ef13b25d96f9e" name="slurm_20_11-torque" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="1bcffab1e4e4ce467e52397a1d335cb88da29ab286acd74a970859eb1561e136" name="slurm_20_11-torque" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3e067c292ca1a76b7fac584baf40dfe20061affe388d4491d9a45bd906c82c2a" name="slurm_20_11-torque" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="77a52a285ec45b86a2fcda5aa1ea0567c185197d4a511a23de8b75a8c8fd7860" name="slurm_20_11-torque" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="496567fd91218dd5fbc499a76c54e70f8cdfef3b5a53ffef6c652a28a9838115" name="slurm_20_11-torque" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="12e499ea3d36d35947334f485265dca6f1e92be01e8b955cc370252f0075e23e" name="slurm_20_11-webdoc" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c7014e7aa671e2a87f74a1b25e986c1245a05d908a683fe218aac46b2c70f0ef" name="slurm_20_11-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cb6e23e07891e6bb8fcaeb9099dfcdfd46d4f1131fbb9e2148861149d3c19682" name="slurm_20_11-webdoc" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2736a07401a1c05362b750d66fabfaffc94bccc978c29607d0ab66078876953a" name="slurm_20_11-webdoc" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="1f75a766dcc255ed940b06e894f10d4ce543df68666a555717941a42f6276771" name="slurm_20_11-webdoc" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c4082bda96734f57cf11678c063e9aa457fe5ce0b8447704d14f616975921ab8" name="slurm_20_11-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1607ce8fac8fcebeea009c88c66ca041cadd8605f9c46ae663cdd4c01c8815af" name="slurm_20_11-webdoc" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="f1a3efb6b7f51fd23c56eaae19e62645c99877b90f09c6083c9a841d95798863" name="slurm_20_11-webdoc" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="8819f971a70632b89b5ff233b4c2ad73629895a38b23292f31d92b1603300b7f" name="spacecmd" arch="noarch">
  <version epoch="0" ver="4.1.8" rel="3.47.1"/>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.11-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.12-1
- Bugfix: referenced variable before assignment.
- Add unit test for report, package, org, repo and group
- Bugfix: 'dict' object has no attribute 'iteritems' (bsc#1135881)
- Add unit tests for custominfo, snippet, scap, ssm, cryptokey and distribution</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Bump version to 4.1.0 (bsc#1154940)
- Prevent error when piping stdout in Python 2 (bsc#1153090)
- Java api expects content as encoded string instead of encoded bytes like before (bsc#1153277)
- Enable building and installing for Ubuntu 16.04 and Ubuntu 18.04
- Fix building and installing on CentOS8/RES8/RHEL8
- Check that a channel doesn't have clones before deleting it (bsc#1138454)
- Add unit test for schedule, errata, user, utils, misc, configchannel
  and kickstart modules
- Multiple minor bugfixes alongside the unit tests
- Fix missing runtime dependencies that made spacecmd return old versions of
  packages in some cases, even if newer ones were available (bsc#1148311)</changelog>
  <changelog author="jgonzalez@suse.com" date="1580385600">- version 4.1.2-1
- Bugfix: attempt to purge SSM when it is empty (bsc#1155372)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.3-1
- disable globbing for api subcommand to allow wildcards in filter
  settings (bsc#1163871)</changelog>
  <changelog author="jgonzalez@suse.com" date="1591790400">- version 4.1.4-1
- only report real error, not result (bsc#1171687)
- use defined return values for spacecmd methods so scripts can
  check for failure (bsc#1171687)</changelog>
  <changelog author="jgonzalez@suse.com" date="1595505600">- version 4.1.5-1
- fix escaping of package names (bsc#1171281)</changelog>
  <changelog author="jgonzalez@suse.com" date="1597233600">- version 4.1.6-1
- Fix softwarechannel update for vendor channels (bsc#1172709)</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.7-1
- Fix softwarechannel_listlatestpackages throwing error on
  empty channels (bsc#1175889)</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.8-1
- Python3 fixes for errata in spacecmd (bsc#1169664)
- Added support for i18n of user-facing strings
- Python3 fix for sorted usage (bsc#1167907)</changelog>
</package>
<package pkgid="5e32642d3107d25310efbfe34f95fe0f49375f2d0c89ebde4f9e7a4a8f8730f9" name="spacecmd" arch="src">
  <version epoch="0" ver="4.1.8" rel="3.47.1"/>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.11-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.12-1
- Bugfix: referenced variable before assignment.
- Add unit test for report, package, org, repo and group
- Bugfix: 'dict' object has no attribute 'iteritems' (bsc#1135881)
- Add unit tests for custominfo, snippet, scap, ssm, cryptokey and distribution</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Bump version to 4.1.0 (bsc#1154940)
- Prevent error when piping stdout in Python 2 (bsc#1153090)
- Java api expects content as encoded string instead of encoded bytes like before (bsc#1153277)
- Enable building and installing for Ubuntu 16.04 and Ubuntu 18.04
- Fix building and installing on CentOS8/RES8/RHEL8
- Check that a channel doesn't have clones before deleting it (bsc#1138454)
- Add unit test for schedule, errata, user, utils, misc, configchannel
  and kickstart modules
- Multiple minor bugfixes alongside the unit tests
- Fix missing runtime dependencies that made spacecmd return old versions of
  packages in some cases, even if newer ones were available (bsc#1148311)</changelog>
  <changelog author="jgonzalez@suse.com" date="1580385600">- version 4.1.2-1
- Bugfix: attempt to purge SSM when it is empty (bsc#1155372)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.3-1
- disable globbing for api subcommand to allow wildcards in filter
  settings (bsc#1163871)</changelog>
  <changelog author="jgonzalez@suse.com" date="1591790400">- version 4.1.4-1
- only report real error, not result (bsc#1171687)
- use defined return values for spacecmd methods so scripts can
  check for failure (bsc#1171687)</changelog>
  <changelog author="jgonzalez@suse.com" date="1595505600">- version 4.1.5-1
- fix escaping of package names (bsc#1171281)</changelog>
  <changelog author="jgonzalez@suse.com" date="1597233600">- version 4.1.6-1
- Fix softwarechannel update for vendor channels (bsc#1172709)</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.7-1
- Fix softwarechannel_listlatestpackages throwing error on
  empty channels (bsc#1175889)</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.8-1
- Python3 fixes for errata in spacecmd (bsc#1169664)
- Added support for i18n of user-facing strings
- Python3 fix for sorted usage (bsc#1167907)</changelog>
</package>
<package pkgid="5cb679d763c18c1d13679ec19efb297b0d64a969566d3cbdad1cff587e4ccbb6" name="spacewalk-check" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="6d195b25eda3531856d1bc762ea848d4585e3a70ac76b6fed9f58a9b94a6a379" name="spacewalk-client-setup" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="ec363893fb3be7420ed1086d953ab979983529c8d3c7bb844ffb641ab49e5f54" name="spacewalk-client-tools" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="867bfbb22d49ebb93f20c4d7a7f5dbc41bf8448ee30a7aeab5352d7a93fffd49" name="spacewalk-client-tools" arch="src">
  <version epoch="0" ver="4.1.7" rel="3.29.1"/>
  <changelog author="jgonzalez@suse.com" date="1555934400">- version 4.0.7-1
- Add makefile and configuration for pylint</changelog>
  <changelog author="jgonzalez@suse.com" date="1557921600">- version 4.0.8-1
- SPEC cleanup</changelog>
  <changelog author="jgonzalez@suse.com" date="1564574400">- version 4.0.9-1
- Make a explicit requirement to systemd for spacewalk-client-tools
  when rhnsd timer is installed
- The rhnsd service was replaced by rhnsd timer, so
  registration script and systemd presets are now adapted
  to this (bsc#1138130)</changelog>
  <changelog author="jgonzalez@suse.com" date="1574856000">- version 4.1.1-1
- Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)
- replace spacewalk-usix with uyuni-common-libs
- return a non-zero exit status on errors in rhn_check
- Bump version to 4.1.0 (bsc#1154940)
- Require mgr-daemon (new name of spacewalksd) so we systems with
  spacewalksd get always the new package installed (bsc#1149353)
- enable spacewalk-update-service on package installation
  (bsc#1143789)
- Invalidate cache 5 minutes before actual expiration(bsc#1143562)</changelog>
  <changelog author="jgonzalez@suse.com" date="1581940800">- version 4.1.2-1
- spell correctly "successful" and "successfully"</changelog>
  <changelog author="jgonzalez@suse.com" date="1583928000">- version 4.1.3-1
- add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)</changelog>
  <changelog author="jgonzalez@suse.com" date="1584619200">- version 4.1.4-1
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1586952000">- version 4.1.5-1
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3</changelog>
  <changelog author="jgonzalez@suse.com" date="1600171200">- version 4.1.6-1
- Remove duplicated languages and update translation strings</changelog>
  <changelog author="jgonzalez@suse.com" date="1603368000">- version 4.1.7-1
- Remove RH references in Python/Ruby localization and use the product name instead</changelog>
</package>
<package pkgid="7ba1bfc19a27222d9402deffc8071bf9a6943ebc82d46037f23c6702a1119d4a" name="sssd" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d1b644b437b6311c1b3615869ad954462368518b93e45da1add361a3959b51e2" name="sssd" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="c88d50aefb295be41c60a187b1c6cf4d34cfe97d4ff15dfc972283572f6e4eb3" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="c18272049d4a89918affb6c3f7a0108648076c2fb38792b4ea9b2c96a996acd5" name="sssd" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="8cbfbde5cddfefb9041478a346c8afd932b259ac21059f3b42115ab3ef6fb070" name="sssd" arch="src">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="59378d0d6499c1bf27bbc0f584b789e2bff56c788aff22cb11f7f89f80edf539" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="d085dc35f688560203f96db9fe59854c7e3eb277ee9c10ba606ff23cedf94f66" name="sssd-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="5a4d28fbead97ec94952d53d0a8d6839b6f9b11bd704233eb864c4056d5399be" name="sssd-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="fe0cee330dd07a9e80757594fe2a3e2c734066d034b050b37778d40e4d1c7761" name="sssd-ad" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="1555933ae0dbe1ebe45fe73c4fcc5dd148507d2199257cd87e4123e7b0140889" name="sssd-ad" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="3bf9417a95d94d49dd96a0edb80d9784a9c0274ca3d5f192796b26a991624f3e" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="65754834c52b8275eab4ef0994fe103f9c4ae92e533fb01052234386fb7163fa" name="sssd-ad" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="9e2c41b08beb1cdf8dfe0f386683bdbd29330103861ebf08a2d3871f7f35816e" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="7fccb157d42f8de72aaa381c5956630bbaef6f895a3b372094cfe4feac2f01a3" name="sssd-dbus" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="dc5faefc1f2a04b79649fcf6df839f3aed872f0954a84a8fbfc65f2df4b6b521" name="sssd-dbus" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="cf521cbe9b363f5cbef4852b7d665c072c33ba7020303fcfe4798aa465dda3a8" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="02b13b56e4bebb0590450ec86f99b42c58ac3f49b993cc9772a7c7b3a92a43ca" name="sssd-dbus" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="5a991361174a37bc1873f9757b379484c9fea338ad2adb029a22159da8264c10" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="5e47f1713f6f1f36747007fbbdb94cde6011cf5f67adea7440aa14606dc5f487" name="sssd-ipa" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="5cd20448afc76bed1be137f028f635cc9ffe5de99d6b7088e093f774b164ad25" name="sssd-ipa" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="c6627a703cedf580299142dcf2d06873b8f1b94b946dea5d70412cd815c99bb1" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="33ac81f7bbe101e4e40bc47707f2ab7863bca057f8fa94fb81f529ad6848b5b0" name="sssd-ipa" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="353114c32262fd842e309529b437be8c6890deced3a8c13b386d100768f32d9d" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="a5e13ba6635f493dd4cbc0ca98ea8bf97fe39a0ed38228986c6101b1fc119fa6" name="sssd-krb5" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="9c3c8ab980b2d550ec7fa29cfe2d0671b02e67873d59947d12fcee93e90c6ee3" name="sssd-krb5" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="1d6177631c20ba7e8570928e452678bf7d8a0f30215a6958d91bef971e8c4afc" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="f413a2e05583092e1651626f59738917544c395be63eda6bac0bb33d9f6c387e" name="sssd-krb5" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="53cba4904a74b288e9debce2c73091019d94883d460d8a69c5be060be1fac978" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="df19c2cddc14faa7de0ab8d107ffbac376b3711346caca8be2025e2be431198d" name="sssd-krb5-common" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="940fb597584637c71a68a6ba0f240a2b29771a3fd4df1be88244ad083559d19b" name="sssd-krb5-common" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="69076deea07b6f94d9d6d72fe3b20d8c1143d78e215c8e4c1abd1f4586309672" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="0c8342c6f56d882f1f986f23bec9f7f849a6e483b99d7741851033fcb023b07a" name="sssd-krb5-common" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="f79dbf4ef04486a54d915a10b3de4f89199e68f2fc978bff22c19140d41a3610" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="dbcf933b9951f48a023a71619a08582c52d8c2552a4a92858e8546db401bb46f" name="sssd-ldap" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="3ba389eab0e20d1cfc0ebe3912d2c5264bdbe6deca5fea6f25f105159bbcd956" name="sssd-ldap" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="410bf54d0755a511059f9b6e1177964823835af519cd144b6c7c5f754f7fe46a" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="9113f49f2b0236b17cd92972445e5e6e9cb523b91abbc316e04836081d83770d" name="sssd-ldap" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="4901e7f1380dfc7250315d2f4827e9df1bfc62708cd44df13ed15e5afef1d14f" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="e37058144c45677c8ce15f858c077d2e9a0fc26c1aa06be3a2d6466758b30eb8" name="sssd-proxy" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="23c65af71a93c266ff1813d12a49935af3bb6254397b922fea36253b80cf9aa2" name="sssd-proxy" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="4249ab2f2628535db8fa9090674daf0aaaf7aeb2b0eac6dfa448728fee1ba9dc" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="2ca427241aab5869680b2c754974fcd9dbe30422b527eacdd219c37cc3a969c2" name="sssd-proxy" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="ea6b7a192f91bed7704e120a75a8982f7601fa157db699d5772f980a913d66b3" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="0ee758f8aef312981dea9e4eb8d70716c7d2b746957fba4347e3bffeb33b9803" name="sssd-tools" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="52fe13dad421edafbb6b9f086138e6a5400f96d12a457270d488cf6f63a4afc4" name="sssd-tools" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="9ab938ab2cd3e68894212c8dd87d6ce84a499f53cf564d680c7d10c699105d4c" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="aaace5d17cf345674d1baf095b6571213b09ba8498875f3f42a9c23069490d37" name="sssd-tools" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="6d4fdc4e69906fd12801fb15460f752ec92434a2c1dd99d79a8eeb541851586f" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="7d6e409318eed6602ace9f81a4eff2e7bb90789881e6a5ff559860b8e41d7229" name="sssd-wbclient" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="9e95340f8e52fabd49c12deb87e0ea39492d5c97e5622623487b8967bfc77cbe" name="sssd-wbclient" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="57c093f603db5ea93b7825ab796da594430f677478c306a11f00e9f737ff4a9a" name="sssd-wbclient" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="82de8252bc465e7719ed1587a52b23728fcd145486f0c17a303beabebe385c26" name="sssd-wbclient" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="f40e02e06ebf178e42b76bcd71d333fb25a36b539c844badcba903fd122fa277" name="sssd-wbclient" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="610b33a1c957ef2cb84b2896ff2b6b25091125b7f85d2f468027ac6605d914d1" name="sssd-wbclient-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="910b711ebc154217e39bef07e22627f4781b9201d4b3b55dd9ac456eebe25f70" name="sssd-wbclient-devel" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="b721cbf266428480e7097602131bb0eb66a8d7418fb63adf9d08ccf2d7020cf9" name="sssd-wbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="4939f0ab72fec592ee84a602834232c9b7a6f836337865c454f6ee8bc4e828be" name="sssd-wbclient-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="db5920fffd8bcc378629ddb8c6765fe05036fbb8c07d4712c031adaeb9eaf6f1" name="sssd-wbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="03c2b35068cc3fdec41114cc9a4ac6cdc3577421d4fb4bd57467c5a24028c943" name="sssd-winbind-idmap" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="37a67fb21887c0ad97d3b736589fb8952b09e34f6f94b0ab6a6b56377265124e" name="sssd-winbind-idmap" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="2a22c3802ea892ffff08606aa7b71405b47885e194feebf975dc6369d30844be" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="7a926bc96735d1d5dbfbf60bd927aa0b84c7572ea8fd4697305c676b1d97fb01" name="sssd-winbind-idmap" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="7123b6981e0812360d9e87f1cbe605e31762a2b0e6495d692e39c2c06cad80fd" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.43.1"/>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (bsc#1156856)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1578571200">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0027-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1600776000">- Update samba secrets after changing machine password; (jsc#ECO-2613);
  Add 0028-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
</package>
<package pkgid="edc39e5c8a3d85555fc86cd6740b24c35513f7e7d8acb081ac942c909ed04a88" name="strongswan" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="ac3b43502496d63f118152b4819b857a30028caf41253f9dd9d61d0b306fefea" name="strongswan" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="094b281b296246562fb27faf803148e20a793c7cd160bec8377c1e5dcfdcce7f" name="strongswan" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="0d175e7af8b06047778477fb3b487a7b8c724659a68ddb10bfa190b6c3527329" name="strongswan" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="f6b1604256b619630fb8aeddf676448ee752ba28277269df4230ebfd91f131ba" name="strongswan" arch="src">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="7fe983b719e1f6cb45efa36d7effe72ec3c9124e353551f9cb751569929b1d14" name="strongswan" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="e39ee8452aeed3d5768741fab9110ac8cf12fdef748606a27b4675e86d48124b" name="strongswan-doc" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="b0880e19f13301b9f803c11b7ee52f48a306a17e98df67becea980a50a02d356" name="strongswan-hmac" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="abcb1503d6d30155465be7133ef87fe41eb46a1c726003676781db7f1433192d" name="strongswan-hmac" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="05ba0cb8894f96c230c025154ac84e60be422fe56d7195eb325ca74e7086989b" name="strongswan-hmac" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="60cb539f929a93a65309aa3c06ae0427c18c1020d6663e975e07530c064eb29a" name="strongswan-hmac" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="095503d7d3619a41203550ed1c6ba111ec72ad888e0f8af20e572126c4cb73ef" name="strongswan-hmac" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="00414d7f2b747d3ddf82b03b531a89df7e97d5c8378a771ff20fd4800201cde5" name="strongswan-ipsec" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="6fca611eddaa7dafed169c40efa9c908cae449d4fe86f646e692204847425c3b" name="strongswan-ipsec" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="15afd785408a7a724b19b71380125a6bcc22cf216e624f41f31f21baee4972a0" name="strongswan-ipsec" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="b15fe5a1f147402f5a44deaaebb15592c42a649ae212898736d5251b28017d0a" name="strongswan-ipsec" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="b8667d9079f1b4d6b0e0f9bb83df1886600cefb71211a99471c1b5918887889d" name="strongswan-ipsec" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="3d550a7caf2802e38e4c133f9188c71e11259598ff0df63e788c66cfae1c1bfd" name="strongswan-libs0" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="e87fcddedf66fe6f8a6236c7d4ea27dfbaa3e254df0e4011e5e3599f016a2bf9" name="strongswan-libs0" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="f2c589bc447659b3bbccaa106a0e459c0ccbf6bffe6177d35f7764a4040eb2e2" name="strongswan-libs0" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="f8a70d270c884ef029a69f2b780a1143e964878717ebc1526bea0325da220c7b" name="strongswan-libs0" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="f365ef06516c789be8f738a245ce3e5ef2c588038f93f127bc08c3a14246f594" name="strongswan-libs0" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="31a9a479a970c819bcce85d046f750e390aa21b4d359d06fa867b13660f03339" name="strongswan-mysql" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="b92bb067ee49715fc5fe3656c50e538833896b2918605b09e661594d55e4f465" name="strongswan-mysql" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="6a97d83bd1c5f2941166a8a1511952712f76876c078123ecb44b58350bb8a4d7" name="strongswan-mysql" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="f793155f0b381a4e69ee92bb5b44874f02bb7357384b9aa2611b20747a9f016e" name="strongswan-mysql" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="7cc75291cd0ff8ae525ea7c5fe79afc61ba90e50bc268b95816136558e56c34b" name="strongswan-mysql" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="de7827dfdd90a1eb68b9abe27c4b4d8bc79592d5dc9cd365c9ae0996ac8528ee" name="strongswan-nm" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="79f8a9c9b2cee5ecf4b69bc2f2ae0ed4a9bc3c910045496df8ea21684e380c99" name="strongswan-nm" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="9c81f75a0d14d262b95ae0bbb5dc855a7a547aeeac299f156ba402ec30ff6eca" name="strongswan-nm" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="be37272b9beb9e773633bafddc124c174adfb6d39dd7713c7d85600e3a089f3b" name="strongswan-nm" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="07882e58b51b86b52e4ed3284c959e4c31c4882c0878b15b47b3373de25b70ef" name="strongswan-nm" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="3b03e5b51d8cb8e493800fc2df7c343fb652a86d1c03368f6f2ab6b73c0565d3" name="strongswan-sqlite" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="301849bf50810454ff6bb0e7433eb6f0106b4efe26206781d19a12cf4b92b7b3" name="strongswan-sqlite" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="f660ab2c0ddf8f7416df752c3abee378e1c1cea75af0623e4eac8a6f912dd934" name="strongswan-sqlite" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="dd057e770934575f5e42d2c5c188c3b4cd33773577711181dc16d954fb893a5b" name="strongswan-sqlite" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="4a1dfcdea13193a3f3cc17deece481f2436562aefe749f7ff4da6fb3a8c6d00d" name="strongswan-sqlite" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="7f05530a304a6df801ecd64d6450b5370aadaa32a935ad86d6bf69ebf47e2540" name="subversion" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="4ce57ceb22658f8b8af9e691dfa72f800d9908dbcfd14831bbcdac53cc798257" name="subversion" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="fd74a0d6e73c8135f2ae640b71bf6411ac03a4a0f428ca14e676fd28e67101b9" name="subversion" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="c8efa1fbaf7613c33b4597a109148d346788d449a399b468a401feb0e93fe31c" name="subversion" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="819266a219fea6f33603f4f5a42e40a4b03333ae4795830c1b61abd00dd3be9a" name="subversion" arch="src">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="ea4e1101db57264e13d7bb46dc7f5bb1991e516e7fd2cb6d5165ebc4fb35d46a" name="subversion" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="0da580f92d286db52989c14b43c8cdf694dea696f047980d693dbd021e99fae9" name="subversion-bash-completion" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="37020497b106b248d90285f8baf2bb329b14ae56cfaa592d9f80874538ebb4d2" name="subversion-devel" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="263f57f6e4badfd16069dba8f99861df600f158637b70613ec1d40d9c4946ff7" name="subversion-devel" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="20f4ed1883d2bb648ad0978c303751c855f34fd47c7850858a23251c8d9b770a" name="subversion-devel" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="370c5ce2391ad742ed86e5806b245abb12101de99a676271af133c9c33a274cc" name="subversion-devel" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="964a3d37bc30ef5b23847ce138769df39fe94c4b56f40f85e783f3bda0f04641" name="subversion-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="0431da73769c5ba2e85cc4931984b787f2a3690ee79237de6484c7070ed64962" name="subversion-perl" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="0a21f7c3f718a02469c882b9df4a978cf2ef75c93f92fa1cb388b5e22b161db7" name="subversion-perl" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="51cc08d43f170f2028dc9521388fef2c3405ae41ecebe41127fb9b6afb05f545" name="subversion-perl" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="8a18a396ec2916441bbe1dc6f228ad44f923ac55cccf477f28fe3f0857e7f2f8" name="subversion-perl" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="b49e92d6da75e3cf8b643ccc4d5ca01d1904e705391ad854c56eee12a1f4b29d" name="subversion-perl" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="18dc75864d1242197d127c5b1edbf889b77bf3a21efb01ac72316c4ced7958c6" name="subversion-python" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="d23e266e8b92f7e587a4f1333135ff83e54a1abd5386c5c78ca5623d273d2db0" name="subversion-python" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="19f6435d029704a958b66bf45275d1e1fd06bf9da4ba7e4c46d9a91afe1da258" name="subversion-python" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="172bdf2dbc57e4ca12155de25d8d63d03315952222b078353a6e4908abadd952" name="subversion-python" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="db2f83e8639e2002441bc41f8fc75a969ce17e44bc2e3b171aae69daf753e762" name="subversion-python" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="a2690dde8c12674442de8d3faa1bf8201f3a8a215092348a4cece3d5953da76e" name="subversion-python-ctypes" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="3c0618e04e9161960dc296d74c4960e51de55ac956a2467b4e8c58d2c4b215cd" name="subversion-python-ctypes" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="0c61d4307da280fd41e9fe67e37416f3e559879a94b8d6a3a335bb5b5399e75d" name="subversion-python-ctypes" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="4424c07c43286b471a599e89d07d11b4c4e77338870f5febcc0007b6f5ddf276" name="subversion-python-ctypes" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="b4049877e604cf3e42b877c07c6c9205c23839a19fb7cab4cf0635eaa745ee6e" name="subversion-python-ctypes" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="10d574e15b5506c7fd4e0b3f266ad9a0c172d61d99f1fcf5c9915dae9ceaba5c" name="subversion-ruby" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="f8945c149b01349dfa47da2faeef4ee09fcae9bfecf793eaf98e16effea9dd45" name="subversion-ruby" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="f5f443acddc33c6d86dd56c5b8d9d9b8017844b9a4d7662863a42aa1327d9581" name="subversion-ruby" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="2abfbb0415a4a449095ecf4e5cbed86fb5ddd4d40d18c18527beba93b41aafe1" name="subversion-ruby" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="4d78fc54080021680b9fce3f03581ef47423f18d4fb09df189535680f26c4689" name="subversion-ruby" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="4a80aef1bd071ef513857262382f03dd25ef5558d7423c920f332fc2828b4e31" name="subversion-server" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="cc3661fffc2dc8edd7b0d2a8b673d8c0e88003b3eadc2eaa42425e58ca92a33f" name="subversion-server" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="bac548bb0dd489e5d24d728d2c961fb8ea8e4fd6b1cabf63e3cf5a72d20da062" name="subversion-server" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="4c9365d57ff2a043398bda161822347106075594207b810ef5ea6a4bcc3ad83a" name="subversion-server" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="22c3a314f026ed7641029ba9502a1bbb7dd4f9c8bdce2d4e3c5bc84f4248caab" name="subversion-server" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="bfee57349acd5642d7477f9af4fd2ceb5d59c6c2342053c368c425d3ad156029" name="subversion-tools" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="8177ecc0ade9bb0079755d74a79768a97b8a26289bd62fefe557bcbdc36821cf" name="subversion-tools" arch="i586">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="942043ed60586969a524b16fd237ae96530de4034e310ce21804030477116d1c" name="subversion-tools" arch="ppc64le">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="92ce43601f6dbd6d384917c851d3dd9f4cb31138fcb5637abb38cce7692751d9" name="subversion-tools" arch="s390x">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="956eeda531104d42f1253880a70d9434b108e60c67f0c2b820cf741b2f65176e" name="subversion-tools" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1502452800">- Remove user changing option inherited from sysconfig from README
  * Was removed as it does not work on systemd, new section is there
    describing current approach</changelog>
  <changelog author="tchvatal@suse.com" date="1503662400">- Switch the KDE condition to match sle15 too</changelog>
  <changelog author="vcizek@suse.com" date="1507550400">- Disable kwallet support on openSUSE built with openssl 1.1, because
  otherwise the libopenssl pulled in by libserf and libqt4 create
  a conflict (boo#1042629)</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Explicitly require python2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher. The build uses extensively
  the javah tool which is removed in jdk10.</changelog>
  <changelog author="astieger@suse.com" date="1523793600">- Apache Subversion 1.10.0:
  * new conflict resolver
  * Many bug fixes and enhancements
  * lz4 compression for the repositories
  * https://subversion.apache.org/docs/release-notes/1.10.html
- Packaging changes;
  * Convert dependencies to pkgconfig counterparts
  * Add dependency on liblz4 and utf8proc
  * Use %license (boo#1082318)
  * build with KDE5 KWallet support
- Refresh patches:
  * subversion-1.8.0-rpath.patch
  * subversion-no-build-date.patch
  * subversion-fix-parallel-build-support-for-perl-bindings.patch
  * subversion-perl-underlinking.patch
- dropped patches:
  * subversion-1.8.11-autocheck-time.patch, upstream
  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required
- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list
  GNOME keyring support in svn --version when using libsecret</changelog>
  <changelog author="kbabioch@suse.de" date="1548244800">- Added subversion-CVE-2018-11803.patch: Fixed a vulnerability that allowed
  malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root
  path from a recursive directory listing request (CVE-2018-11803 bsc#1122842)</changelog>
  <changelog author="tchvatal@suse.com" date="1564056000">- Update to 1.10.6 bsc#1142743 bsc#1142721 CVE-2018-11782
  CVE-2019-0203:
  * Allow the use of empty groups in authz rules. (r1854883)
  * Fix conflict resolver case with move vs move conflicts. (r1863297)
  * Fix #4760: Missing children in svnadmin dump --include/exclude. (r1863298)
  * Fix #4793: authz rights from inverted access selectors. (r1854882)
  * Fix conflict resolver bug: local and incoming edits swapped. (r1863300)
  * Fix #4806: Remove on-disk trees with read-only dirs. (r1863299)
  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863302)
  * No tree conflict when 'svn up' deletes unmodified dir with unversioned items. (r1863296)
  * Remove a useless common ancestor search from conflict resolver. (r1863294)
  * Conflict resolver support for added vs unversioned file (r1845577)
  * Conflict resolver support for unversioned directories (r1846299)
  * Fix: repos-to-WC copy with --parents doesn't create dirs (#4768)
  * Fix: foreign repo copy with peg/operative revisions (#4785)
  * Fix: foreign repo copy of file adding mergeinfo (#4792)
  * Fix: assertion failure using -rPREV on a working copy at r0 (#4532)
  * Fix: tree conflict message ends a sentence with a colon (#4717)
  * Fix CVE-2018-11803: malicious SVN clients can crash mod_dav_svn
  * Fix: unexpected SVN_ERR_FS_NOT_DIRECTORY errors (#4791)
  * Fix: mod_dav_svn's SVNUseUTF8 had no effect in some setups (r1844882)
  * Fix crash in mod_http2 (#4782)
  * Store the HTTPS client cert password (r1842578)
  * Fix shelving when custom diff command is configured (issue #4758)
  * Fix conflict resolver crashes (issue #4744, r1842581, r1842582, r1842583)
  * Fix conflict resolver endless scan in some cases (r1842586)
  * Fix "Accept incoming deletion" on locally deleted file (issue #4739)
  * Fix "resolver adds unrelated moves to move target list" (issue #4766)
  * Correctly claim to offer Gnome Keyring support with libsecret (r1831142)
  * Fix segfault using Gnome Keyring with libsecret (r1835782)
  * Fix JavaHL local refs capacity warning when unparsing externals (r1831143)
  * Since on Windows Subversion does not handle symlinks, never check for reparse points (r1835701)
  * Prune externals after 'update --set-depth=exclude' (r1835702)
  * Fix issue #4740, "conflict resolver searches too far back ..." (r1835703)
- Remove merged patch subversion-CVE-2018-11803.patch
- Remove merged patch subversion-1.10.0-fix-svn-version-gnome-keyring.patch
- Refresh patch subversion-no-build-date.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599220800">- Add patch to remove dependency on kdelibs4support just to run
  kf5-config to find out that headers are in /usr/include and
  libraries are in /usr/lib(64) (jsc#SLE-11901):
  * remove-kdelibs4support-dependency.patch</changelog>
</package>
<package pkgid="6381372ea3b1eb4430629cc94044080ad1af2b3eb40116035b4444b1c5ea8fa9" name="sysstat" arch="aarch64">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="f279a04689a3433c1ffad5f8f03d392448dba80350c9128e51d667257465112b" name="sysstat" arch="i586">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="0574c46d6535546a139eaf038a099d110e4a8d9539e7a52ac11c1ebe3ad829ce" name="sysstat" arch="ppc64le">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="bcba4ffae419b6be7cbb42ffaec9da9ec7bedda5cd23755739915d719535f3bb" name="sysstat" arch="s390x">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="04bcd04a61ef52764510114a05ad646a9c87e4a57d7cdcce41a18ea810731e36" name="sysstat" arch="src">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="4058f9eebca31057023d79c51b57451145bf70be85cbd7105c14861f455a604c" name="sysstat" arch="x86_64">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="6989badf242ccd64d3146d3ae4ea9a8248db8e4b93447bc43c2b73493f5d20d8" name="sysstat-isag" arch="aarch64">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="3f0ddd163bb2ad885f1c20fc63627b47581f7d63ea66eb1c10dc6ecd1bfe0903" name="sysstat-isag" arch="i586">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="eb8537e70b97dbad6a5ecb8d96fda8d8eeac1667f5f8510fbc8945db9eec4bf8" name="sysstat-isag" arch="ppc64le">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="610b2850fa16f44cb397282fc132689aa9b35c01bf8f04e216d1c86686ae34f0" name="sysstat-isag" arch="s390x">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="4081ee2de1427c81c2ace314af92519d6bc26845ee881c7c90982ebbb4d4814b" name="sysstat-isag" arch="x86_64">
  <version epoch="0" ver="12.0.2" rel="3.24.1"/>
  <changelog author="tchvatal@suse.com" date="1534248000">- Update to 11.6.5:
  * sadf: SVG: Display graphs for swap utilization in packed mode.
  * sadf: SVG: Don't take into account activities with no graphs when
    calculating canvas height.
  * sadf: SVG: Don't insert a gap in SVG output if an activity is not
    displayed.
  * sadf: SVG: Fix possible negative value in graphs coordinates.</changelog>
  <changelog author="tchvatal@suse.com" date="1534248001">- Version update to 12.0.1:
  * sadf: SVG: Remove id tag from individual graphs. Use activities
    identification numbers for id tags.
  * sadf: SVG: Add new option "showtoc", which can be used to display
    the list of activities for which there are graphs ("table of
    contents").
  * sadf: SVG: Improve output for softnet activity: Add a discontinuity in
    graph when corresponding CPU is marked offline.
  * sadf: SVG: Improve function used to assess SVG canvas height.
  * sadf: SVG: Fix core dumped on buffers reallocation.
  * sar/sadf: Devices list management code refactoring.
  * sa_conv.c: Use write_all() function instead of write() to handle possible
    signal interruptions.
  * spec file updated: No longer create a debug package.
  * Remove many warnings from gcc v7/v8.
  * README file updated.
  * Manual pages updated.</changelog>
  <changelog author="tchvatal@suse.com" date="1539691200">- Up to 12.0.2: (fate#326576, bsc#1089883)
  * This version mainly includes bugfixes
- Dropped patches for SLE-12, fixed upstream:
  * sysstat-10.2.1-iostat-sar-util.patch
  * sysstat-10.2.1-sar-ifutil.patch
  * sysstat-10.2.6-fix-json-with-file-utc-time.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
</package>
<package pkgid="12a8bbb2611a594fe77b7ef92534077e5e7fd7bfeb3a8e6a3077f73b340b160f" name="systemd" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="099ef765a3bb4ea87ce13cf4dbc6a32633be4d129c6d9c70c63de73f5cd68629" name="systemd" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="d41c2bf8349eaedd7f44dd1b829f6d09dfeba5f9bab2e535e58f6a08f71471ee" name="systemd" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="b1b62d6e63537f22a64a5328c6835a9c28ecf5ffd5c3bbc6e6da74626e4924d8" name="systemd" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="065813c55908ec4c41522f0b1ec120771e4a366a12fa1b9edc9d178172118283" name="systemd" arch="src">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="685db6979ea4171dccad5c3a055b169f7e96846f65ac8ee61d3f50d25d0f75cd" name="systemd" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f8be6d3def79e9dab635bea8ee9b8b286bc14549ad08e1022adfc21e0c103733" name="systemd-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="9cb1ceae725207174717571776e958f8fba08cf7e350f1ab4a7542052233728c" name="systemd-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f58db3b46d059ed6365af87bfacfe8991be660b57f6dd5532ba72272365b6816" name="systemd-bash-completion" arch="noarch">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="544fd60f2416cb285704f32e855b38565aa5b8fd6e8eb0482b6f61e99e5427af" name="systemd-container" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="fb66d3b4afe8eafcdd3bdf16f27ca5613c821c2eb1eae6fcbcb4bba7f2216a47" name="systemd-container" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="0dd2409196a114a1a28968fb2dcdd5aaaa91a388131d9819b6ee61fbb56de4fa" name="systemd-container" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ce85d5c9298e812649cf101ac133d76980391763daa4bf3984f73cdb264c1dda" name="systemd-container" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5b7f088c85cd41768efb1448879e89c98095d150aa3107785ffbd84b83f33dab" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="bf60a4620d7a77a90caccf4a83ffd6b3fb002abee28e0c5c68ba2d532ca3aa70" name="systemd-coredump" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="8a1b3a47a53e4b9f784e4e185e2d7cb3c89b11b4723c1e192597f45c400136f1" name="systemd-coredump" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ece2476f01c3ca914fc35b3826c980cd8e0fcb4c17f44431980e40961e414a6d" name="systemd-coredump" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="c4cf8a3ae85bbc5a7cec6150fbe5b78c147b1107b6d37484c6c611adcd9b7440" name="systemd-coredump" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="0d40a2f4fb2c0c4c637ac1a027ed0946c70d8c70bfb9ee637ab68f7afbcd915e" name="systemd-coredump" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="e7ff72e2a8c886f4ac6f2fd446d4843068908cb90000224d5f6739c264ac4d83" name="systemd-devel" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="b72f929cb29d19e9eedf9ba1c0a3eda29180c51b22e1fd2a3ab9ec3a44227928" name="systemd-devel" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="bd944db39368ede29d3034a1c5f8bcf34679dfdac206d267709006e9f9e5321d" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5642c8cd249b92c2a1634a46ef8776b67d5200a313896b580e9018a9c5b0a422" name="systemd-devel" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="fc29e217381574eba28cf869a086d394aa940402eeee754377b436ac08944e57" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="7ed59492173df4885abfd2604f52025b6a9aaa709b274ef916fee3d329310f57" name="systemd-journal-remote" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="da3b5f4c105a8d533e46b9aea9353c0bcd020132ea1c88c3dd3bff55f59d8c07" name="systemd-journal-remote" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="a6f004a04396b6733dbf4202b814dfa85eb2d1397fb70acddade5bfdd708b077" name="systemd-journal-remote" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="400b4de03fc5abca0c62596ebf3b77f5ff50e0d8c451ce77a1ab3531c082f997" name="systemd-journal-remote" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="19aa312173b068783eb25971e98b4a1a3f6adbc0a76ec4f0792efa7f82c25167" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ef358b34b0788d0e50b2e9f0802f2469e5a2179d18896618589e6c2267749029" name="systemd-logger" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f5c2701b621e474aeef6511ba2e0a09d90f9c498de61daa3ad611ec07b10ed6c" name="systemd-logger" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="4497913be87d5615804713dd43501909365ce76b2ec92488c992cfc4c14c34bf" name="systemd-logger" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="50103334f27a7bc61138f4bcac8af0993661b5f0e0e9cadedb20de5c84eb2ad1" name="systemd-logger" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5d333e6826830fbdbc87d55c7c51ad7a399e7087e52efd682a4f137073aa9a23" name="systemd-logger" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="7155682e014a4d089fb38fc1663fad53de52b4a88bfdacaa6540d085db518c1e" name="systemd-mini" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="d257bcb0a76fb48c8a005fd0c4e9086979c963a0b068b7740d319e026c8c1717" name="systemd-mini" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="adffbca5c7c4cf6705b9a9321de3a200f1f69e88bff165d767b9c6317d328fb4" name="systemd-mini" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="dce6a864284c285c6a4aace9fa8fa18cdecb93c5eae210ed8875cbb02cc5c844" name="systemd-mini" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ade8f00e7ebc9a56a497aa6061b09aa7a281a75373252b6bad837d06816adc8b" name="systemd-mini" arch="src">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f8a149998fa8f909c87657ca4f2701dc6289853df031cf7a1f0f139af05899cb" name="systemd-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="d73ce308ce8ccbd67be03eca1438f84cff2280324032f45be34bd56e512f6070" name="systemd-mini-bash-completion" arch="noarch">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="092dd31404a93dd122ab2051fcdc635adec2a9cdcbd4fa6ac2e5a9e97340de3a" name="systemd-mini-container-mini" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="9bcaf32882c806cb7fe8cdfadba561ca4375eb994f5df1a44cbb25eda2893cbf" name="systemd-mini-container-mini" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="be669d2a9d689022b10f0e08080df90aeaac5e1a237f0b9a4472b8d0bcae9f0b" name="systemd-mini-container-mini" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="3a7e5cb1fcf56af03b0e3239e6e1ba8e9b5d6512b2b819c8f04c49c17cf84517" name="systemd-mini-container-mini" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="d174d294b8d003873ef67ba1063730c39901e4bbf0cfa63914f156abbafa9c41" name="systemd-mini-container-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="51240be74954eb790c8d7f480ac295f934561a10c9786d3c3ee6c07a8657199d" name="systemd-mini-coredump-mini" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="e960d062018830734e86e9d58c1cd59c949742d15b5b6016df1c25ead7c48b34" name="systemd-mini-coredump-mini" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="4304478b802cb1deb65e567c602e4b18df6b829fe9664f313c5244ab953af90f" name="systemd-mini-coredump-mini" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5e6742cce272bcc904244aa85b21f94301fffb9971dbd94c6d94f35d61cf8bb8" name="systemd-mini-coredump-mini" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ecbf8ea0ad58eec8a6cf0ee5f5492e95d3186f560e716c3e212d02fdf2717949" name="systemd-mini-coredump-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="06466ac624fa510e7a601b8a7d038b568cd1c68308c1812933cdd82f0e9d162f" name="systemd-mini-devel" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="4ea8c2d6e9239e247712c31563a1303a72d576937ec461c23f71f3aec6b8a642" name="systemd-mini-devel" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="1635f6b3127d100ac4160419949bfef689b18cd9f378e9bf51f49965e54956b6" name="systemd-mini-devel" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="e8d6189ac5bfdfb446f45a2fdfbdc9a8b74676adf03346c4569c34da4a63d907" name="systemd-mini-devel" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="44fada32cbf6fe558bfb5b41e87f0610dda401a7fdab5eade3e82e1272bbd8c4" name="systemd-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="61bd3e33f5e56bb9b0706076848c263e4ff0aad21f15ef2ffa5ed27b4b151548" name="systemd-mini-sysvinit" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="0169dbe83f2aa804b315650cc2391e658446686a7541c7b0689a2b751f980dc6" name="systemd-mini-sysvinit" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="554477a25f5c89875226fc19eb07ddb0c9f20a0e66cfc41857b6c6291d2b30b1" name="systemd-mini-sysvinit" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="85f370c6b148ad59c9eab496f5afb1b85e57a0597f05ff5fde724bb4333ae480" name="systemd-mini-sysvinit" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="3829342bd3954c8f3dd31bfa2600062206e31bfabfbf7483bc4b33d7747438dc" name="systemd-mini-sysvinit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="14aaab237aa889f70380984501c157724f57fa0f9ad385a87d16a4bf0b6a4384" name="systemd-network" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f6108463f0c295cf16ddb49ad4fdc0dae2d6f75997bee3fde7f9e55363cd3a33" name="systemd-network" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="9becf2cb7cd4bf13a06ce5227c08aa41f3aea7f26285efd8824364977ea28694" name="systemd-network" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="76eaaa904fa06e99b2ba27334dbb1d782ccb85895bdfab6a6b94391ad1d0565f" name="systemd-network" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="74003941b9b9aca04ac47e34bf09836af89c3154c20ddfa0f44356f2e7108b7e" name="systemd-network" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="1c185a096dab942ec962bc45790e6838e90b0b52473125a7a4814df418f14d03" name="systemd-sysvinit" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="a4d8b7302b0bcbb37f0ba3801487631f8c1cc5f4ee2b950faa543e4783d1e1a2" name="systemd-sysvinit" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="fac95546293d1a337b3c091dec4cc549e0c2f90f39fd977394c9a803a78f5218" name="systemd-sysvinit" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="4bbeb252e778d0454ba8278f4e06368a95b0524432205387c939916d1ace76fa" name="systemd-sysvinit" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="fa5380ba317aba53bc676e30f5583e85132814f4bd031785e497e02b5bfa4b23" name="systemd-sysvinit" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="f6899e90f9172db42e0f3092f1c8c4fc0e203fa2b6d954a9e8f6e211f2bd4cf3" name="sysuser-shadow" arch="noarch">
  <version epoch="0" ver="2.0" rel="4.2.8"/>
  <changelog author="lnussel@suse.de" date="1482321600">- initial package</changelog>
  <changelog author="kukuk@suse.de" date="1484913600">- Add macros.sysusers</changelog>
  <changelog author="kukuk@suse.de" date="1489579200">- Don't remove 'm' and 'r' entries from sysusers configuration</changelog>
  <changelog author="kukuk@suse.de" date="1496145600">- Don't ignore errors of systemd-sysusers [bsc#1039708]</changelog>
  <changelog author="kukuk@suse.de" date="1497700800">- Convert sysusers config file to shadow arguments and use
  shadow suite to create user and groups. Fixes [bsc#1041497] and
  serveral dependency loops.</changelog>
  <changelog author="kukuk@suse.de" date="1497787200">- Put helper script into own subpackage</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add requires for shadow to sysuser-shadow</changelog>
  <changelog author="kukuk@suse.de" date="1497873601">- sysuser-tools needs to require sysuser-shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1506513600">- sysusers2shadow.sh: Exit if one of the useradd/groupadd/usermod
  call fails: the resulting system is quite undefined if this
  should happen.
- sysusers-generate-pre: exit the pre script with the exit code
  of sysusers2shadow.sh.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Furhter enhance sysusers-generate-pre: inside the build
  environment, it can be acceptable to be failing to create the
  users (e.g when building sysuser-tools or system-user-root, since
  those two packages have to be speificallty excluded). Always
  return with error code 0 if /.buildenv exists.</changelog>
</package>
<package pkgid="b888bfa5b009f9c3c5a3c7720492d66eb5d0eaa4f54555413c11676df725afae" name="sysuser-tools" arch="noarch">
  <version epoch="0" ver="2.0" rel="4.2.8"/>
  <changelog author="lnussel@suse.de" date="1482321600">- initial package</changelog>
  <changelog author="kukuk@suse.de" date="1484913600">- Add macros.sysusers</changelog>
  <changelog author="kukuk@suse.de" date="1489579200">- Don't remove 'm' and 'r' entries from sysusers configuration</changelog>
  <changelog author="kukuk@suse.de" date="1496145600">- Don't ignore errors of systemd-sysusers [bsc#1039708]</changelog>
  <changelog author="kukuk@suse.de" date="1497700800">- Convert sysusers config file to shadow arguments and use
  shadow suite to create user and groups. Fixes [bsc#1041497] and
  serveral dependency loops.</changelog>
  <changelog author="kukuk@suse.de" date="1497787200">- Put helper script into own subpackage</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add requires for shadow to sysuser-shadow</changelog>
  <changelog author="kukuk@suse.de" date="1497873601">- sysuser-tools needs to require sysuser-shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1506513600">- sysusers2shadow.sh: Exit if one of the useradd/groupadd/usermod
  call fails: the resulting system is quite undefined if this
  should happen.
- sysusers-generate-pre: exit the pre script with the exit code
  of sysusers2shadow.sh.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Furhter enhance sysusers-generate-pre: inside the build
  environment, it can be acceptable to be failing to create the
  users (e.g when building sysuser-tools or system-user-root, since
  those two packages have to be speificallty excluded). Always
  return with error code 0 if /.buildenv exists.</changelog>
</package>
<package pkgid="f9d3f7a0ad29dd58d7273ca31a80215fb52badc528a68d42a43f53210908c077" name="sysuser-tools" arch="src">
  <version epoch="0" ver="2.0" rel="4.2.8"/>
  <changelog author="lnussel@suse.de" date="1482321600">- initial package</changelog>
  <changelog author="kukuk@suse.de" date="1484913600">- Add macros.sysusers</changelog>
  <changelog author="kukuk@suse.de" date="1489579200">- Don't remove 'm' and 'r' entries from sysusers configuration</changelog>
  <changelog author="kukuk@suse.de" date="1496145600">- Don't ignore errors of systemd-sysusers [bsc#1039708]</changelog>
  <changelog author="kukuk@suse.de" date="1497700800">- Convert sysusers config file to shadow arguments and use
  shadow suite to create user and groups. Fixes [bsc#1041497] and
  serveral dependency loops.</changelog>
  <changelog author="kukuk@suse.de" date="1497787200">- Put helper script into own subpackage</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add requires for shadow to sysuser-shadow</changelog>
  <changelog author="kukuk@suse.de" date="1497873601">- sysuser-tools needs to require sysuser-shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1506513600">- sysusers2shadow.sh: Exit if one of the useradd/groupadd/usermod
  call fails: the resulting system is quite undefined if this
  should happen.
- sysusers-generate-pre: exit the pre script with the exit code
  of sysusers2shadow.sh.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Furhter enhance sysusers-generate-pre: inside the build
  environment, it can be acceptable to be failing to create the
  users (e.g when building sysuser-tools or system-user-root, since
  those two packages have to be speificallty excluded). Always
  return with error code 0 if /.buildenv exists.</changelog>
</package>
<package pkgid="6c674e59794c44e516e48c4f7465acf3f45e2010df4a221c18538ca4e409d80e" name="tigervnc" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="c2858ea765c0806493717d8f299d02f28d73206ccc490a2d6f3da0ddb08c6899" name="tigervnc" arch="i586">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="20881470405a6d54f9e203ae1c1ce454e7dc7239b587d650843dd8b9445e4893" name="tigervnc" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="47dcd39e3cfa419e50b1d02f0f75ae19d5d891f1497b05ab3cf85a4293728835" name="tigervnc" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="2f988da690b8eb3aee4f97333c72db52fc76ac643168a8962da39e4d0b01c132" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="c41089d7b37c90f7fa1429b3c0e839c30461b3179209e725cf4c710281fbe7f6" name="tigervnc" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="9ec625195833262408e3b6d684231f7a9328bd7364915b199d3f80eca9759819" name="tigervnc-x11vnc" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="81644eb4562d13d0390f94b5c4cb1d9d6caa99d27a67370f09d0936fbc443983" name="timezone" arch="aarch64">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="5d3b0943ec0b1563cfe06a024f935dd94d14011370066310dd2a7338d841ca51" name="timezone" arch="i586">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="cb599f4cee1067264c2bfd5e5d6f72ab7ac47db9da64392fdc10fd4ea0457218" name="timezone" arch="ppc64le">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="3b61cb1ec91bb1fa2f6a4a0b3b1409b81da1fa315ddcbf082c8e4fdf6acc1579" name="timezone" arch="s390x">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="614399d33d09d50cd81d66d16bc7c64ddb8a56ae950e1491c45568384731be4e" name="timezone" arch="src">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="9dff0baa5c380fe7fd92af2074eedf286ff17aa69fb2a7cd9dc3e3b32fe57839" name="timezone" arch="x86_64">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="89469500f5608ae6c51e3eaa5dbaa28c1e1a37d8dd2a1e453c54dc23c0fa299d" name="timezone" arch="aarch64">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="d612d927750f4b04a486a78468773d829ed6fec4d4c6a9e08ddced91562dc130" name="timezone" arch="i586">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="b0a5efce92b78b2d513dd52aa2e9458714ea544a793d2384dbe9f75a17a0301e" name="timezone" arch="ppc64le">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="4b4eac02b546fffc2a434d76b875fa3cfcabfd75ecdeb537d05747269bca957f" name="timezone" arch="s390x">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="2c42c80a67cb7952f42a283748988eca1a471cd260a03d67c0706f168c3fb00b" name="timezone" arch="src">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="985041742519e3af60e49e46918808faf62bb142afa16315578fb9d80e8ecab0" name="timezone" arch="x86_64">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="0f46e551eeb3244316a582f690a25b019b6edaf6d14e54ec55bc3102d03f92b7" name="timezone-java" arch="noarch">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="060a3414058a349fb4c4059d8d4efafefae90974d08c93cd9ee2641089df16e0" name="timezone-java" arch="src">
  <version epoch="0" ver="2020b" rel="3.33.1"/>
  <changelog author="astieger@suse.com" date="1539864000">- timezone update 2018f:
  * Volgograd moves from +03 to +04 on 2018-10-28.
  * Fiji ends DST 2019-01-13, not 2019-01-20.
  * Most of Chile changes DST dates, effective 2019-04-06
    (bsc#1104700)
  * Corrections to past timestamps of DST transitions
  * Use "PST" and "PDT" for Philippine time
  * minor code changes to zic handling of the TZif format
  * documentation updates</changelog>
  <changelog author="astieger@suse.com" date="1539864001">- Avoid build failures of timezone-java with javazic SLE/Leap 15
  by using an alternative notation for a 1948-1951 DST transition
  in Japan. add timezone-2018f-bsc1112310.patch, fixes boo#1112310</changelog>
  <changelog author="astieger@suse.com" date="1540641600">- timezone update 2018g:
  * Morocco switches to permanent +01 on 2018-10-27 (bsc#1113554)
  * code fixes for zic on 32 bit</changelog>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
</package>
<package pkgid="6c8400567ed9598ada414ee83a429fd04621d852d7350283c679590d5bee1d8d" name="timezone-java" arch="noarch">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="7b503f909fa1e305eca23adf3a902716a7b2cf0084ed57fbd0678413b814300c" name="timezone-java" arch="src">
  <version epoch="0" ver="2020d" rel="3.38.1"/>
  <changelog author="mcalabkova@suse.com" date="1546603200">- timezone update 2018i (bsc#1120402)
  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
- timezone update 2018h
  * Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21
  * New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move
  * Metlakatla, Alaska observes PST this winter only
  * Guess Morocco will continue to adjust clocks around Ramadan
  * Add predictions for Iran from 2038 through 2090</changelog>
  <changelog author="mcalabkova@suse.com" date="1553601600">- timezone update 2019a:
  * Palestine "springs forward" on 2019-03-30 instead of 2019-03-23
  * Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at
    02:00
  * Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25)
  * zic now has an -r option to limit the time range of output data</changelog>
  <changelog author="mcalabkova@suse.com" date="1562068800">- timezone update 2019b (bsc#1140016):
  * Brazil no longer observes DST.
  * 'zic -b slim' outputs smaller TZif files.
  * Palestine's 2019 spring-forward transition was on 03-29,
    not 03-30.
  * Add info about the Crimea situation.</changelog>
  <changelog author="mcalabkova@suse.com" date="1568289600">- timezone update 2019c (bsc#1150451)
  * Fiji observes DST from 2019-11-10 to 2020-01-12.
  * Norfolk Island starts observing Australian-style DST.</changelog>
  <changelog author="mcalabkova@suse.com" date="1587729600">- timezone update 2020a (bsc#1169582)
  * Morocco springs forward on 2020-05-31, not 2020-05-24.
  * Canada's Yukon advanced to -07 year-round on 2020-03-08.
  * America/Nuuk renamed from America/Godthab.
  * zic now supports expiration dates for leap second lists.</changelog>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
</package>
<package pkgid="fe53e8950db4a282c66d37626592959cd73bad4c514c916e0dbc2fa2ecf1226f" name="transfig" arch="aarch64">
  <version epoch="0" ver="3.2.6a" rel="4.9.113"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="werner@suse.de" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
  <changelog author="werner@suse.de" date="1561550400">- Add patch transfig-fix-of-e0c4b024.patch to fix last added upstream
  commit (boo#1136882)</changelog>
  <changelog author="werner@suse.de" date="1565870400">- Add patch transfig-03ea4578.patch from upstream commit 03ea4578
  to fix bsc#1143650 with CVE-2019-14275</changelog>
</package>
<package pkgid="5e63aff6a7b7f1bfb533b855cc3c82f299f42d99304dac8c92c8ba24ce9f59ac" name="transfig" arch="i586">
  <version epoch="0" ver="3.2.6a" rel="4.9.113"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="werner@suse.de" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
  <changelog author="werner@suse.de" date="1561550400">- Add patch transfig-fix-of-e0c4b024.patch to fix last added upstream
  commit (boo#1136882)</changelog>
  <changelog author="werner@suse.de" date="1565870400">- Add patch transfig-03ea4578.patch from upstream commit 03ea4578
  to fix bsc#1143650 with CVE-2019-14275</changelog>
</package>
<package pkgid="7dc763c047517ff63198825443c1ecfefaf8b700dd67392078cb93d3ce5d4f13" name="transfig" arch="ppc64le">
  <version epoch="0" ver="3.2.6a" rel="4.9.113"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="werner@suse.de" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
  <changelog author="werner@suse.de" date="1561550400">- Add patch transfig-fix-of-e0c4b024.patch to fix last added upstream
  commit (boo#1136882)</changelog>
  <changelog author="werner@suse.de" date="1565870400">- Add patch transfig-03ea4578.patch from upstream commit 03ea4578
  to fix bsc#1143650 with CVE-2019-14275</changelog>
</package>
<package pkgid="0f530181d8658493f6886e6ad9ceb5f12f97762de0421cc1e2124e4380f7e84f" name="transfig" arch="s390x">
  <version epoch="0" ver="3.2.6a" rel="4.9.113"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="werner@suse.de" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
  <changelog author="werner@suse.de" date="1561550400">- Add patch transfig-fix-of-e0c4b024.patch to fix last added upstream
  commit (boo#1136882)</changelog>
  <changelog author="werner@suse.de" date="1565870400">- Add patch transfig-03ea4578.patch from upstream commit 03ea4578
  to fix bsc#1143650 with CVE-2019-14275</changelog>
</package>
<package pkgid="f14e8db1e5ec864b1261f3b16d25cd6cc74d27f8345842906a348401ad5caae9" name="transfig" arch="src">
  <version epoch="0" ver="3.2.6a" rel="4.9.113"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="werner@suse.de" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
  <changelog author="werner@suse.de" date="1561550400">- Add patch transfig-fix-of-e0c4b024.patch to fix last added upstream
  commit (boo#1136882)</changelog>
  <changelog author="werner@suse.de" date="1565870400">- Add patch transfig-03ea4578.patch from upstream commit 03ea4578
  to fix bsc#1143650 with CVE-2019-14275</changelog>
</package>
<package pkgid="172f7eaaf150222e7981bb87e649209f584d98b57c6a21c7f14929e041c4e376" name="transfig" arch="x86_64">
  <version epoch="0" ver="3.2.6a" rel="4.9.113"/>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="werner@suse.de" date="1386676800">- Update to transfig version 3.2.5e
  * HTML map output was limited to 100 links.
    Fix by Jan van Dijk
  * Updated for compatibility to PNG 1.5
    From Matthias Scheler
  * Was adding "showpage" command when producing bitmap formats from intermediate EPS.
    This produced "illegal" PNG and JPEG files with extra, blank image.
  * Maximum width of included image in PS/EPS output increased from 8192 to 16384
  * Precision of some PIC objects increased from %.2f to %.3f
  * Double close of output file when ghostscript fails. Original bug report from
    https://bugzilla.redhat.com/728825
- Change out patch sets to fit 3.2.5e</changelog>
  <changelog author="meissner@suse.com" date="1429185600">- transfig-fix-afl.patch: fixed crashes due to uninitialized memory,
  found by afl.</changelog>
  <changelog author="werner@suse.de" date="1474632000">- Update to fig2dev version 3.2.6 (the successor of transfig)
  o Add compile switch --enable-versioning and script update-version_m4,
    to create version string from source control system
  o tikz output: Support -G (grid) option. Make \XFigwidth and \XFigheight
    only scale coordinates, not line widths; Do not set unnecessarily
    \color{black} on text.
  From Roland Rosenfeld &lt;roland@spinnaker.de&gt;
  o Correct comment string in man page fig2ps2tex.1
  o Distribute autotest file lookup_X_color.at - only useful for hacko
  From Brian V. Smith:
  o Changed object defs from O_ to OBJ_ because O_TEXT conflicts
    with system typedef (debian 37_OBJ_typedef.patch)
  o Remove unused charset variables cs and ca from genibmgl.c
    (debian 38_unusedcharset.patch)
  o Build with make CFLAGS="-Werror -Wpedantic -Wformat -Wformat-security'
  o On lines with Round or Projecting cap style and arrowheads, the line
    endpoint stuck out beyond the arrowhead (this was fixed in
    xfig 3.2.5c, but not here until now; debian 41_arrowhead.patch)
  o Changed .ce (center lines) to .RS (right-justify) in fig2ps2tex man
    page file because of issues when generating HTML (From Eric Raymond)
    (debian 36_manpage_ce2RS.patch)
  o Quotes added to output file name for several formats in case there
    are blanks in the name (debian 39_gs_quote.patch)
  o For PDF output, changed -dColorImageFilter from /FlateEncode to
    /DCTEncode for lossy compression (smaller pdf files)
    (debian 40_ColorImageFilter.patch)
  o Update help for PDF options (debian 42_PDF_help.patch)
  From Roland Rosenfeld. Bug numers refer to https://bugs.debian.org/#.
  o Remove bashisms in fig2ps2tex script. Reported from
    Chris Lamb &lt;chris@chris-lamb.co.uk&gt;. Fixes debian bug 480615.
  o Include sys/stat.h in genps.c. Reported from Steven Chamberlain
    &lt;steven@pyro.eu.org&gt;. Debian bug 654767. (28_fix_chmod...patch)
  o Distribute the man page transig.1. (34_transfig.1.patch)
  o Do not report user information in ps files. Debian bug 316382
    (04_displaywho.patch)
  o Set locale to C. Debian bug 45378 (05_locale_patch).
  o Support pdftex in transfig (20_transfig_pdftex.patch). Reported by
    Jindrich Makovicka &lt;makovick@gmail.com&gt;.
  o Fix some typos (22_typos.patch, 35_manpage_typos.patch).
  o Honor environment variable SOURCE_DATE_EPOCH, for reproducible
    builds. Debian bug 819911. From Alexis Bienvenüe &lt;pado@passoire.fr&gt;.
    (33_honour_SOURCE_DATE_EPOCH.patch).
  o Enable fonts &gt;= 42 pt, needs \usepackage{type1cm}. Bug 343139,
    (09_maxfontsize.patch).
  o New pict2e and tikz output language, for use with TeX/LaTeX.
  o Compile with ./configure; make; make install.
    Optionally, use make check; make installcheck.
  o By default, transfig is not built.
  o Swap patterns in PostScript output, were upside down.
  o Silence most compiler warnings.
  o Update man-pages and help text.
  o Accurately position arrowheads, flush with line, in PostScript output.
- Remove transfig.3.2.5d-patches.tar.bz2 but port and add the oldpatterns
  and mpdf patches to 3.2.6:
    fig2dev-3.2.6-fig2mpdf-doc.patch
    fig2dev-3.2.6-fig2mpdf.patch
    fig2dev-3.2.6-genps_oldpatterns.patch
- Patch transfig.3.2.5d.dif becomes transfig-3.2.6.dif
- Modify the patches
    transfig-fix-afl.patch
    transfig.3.2.5-binderman.dif
    transfig.3.2.5d-mediaboxrealnb.dif</changelog>
  <changelog author="werner@suse.de" date="1486036800">- Update to fig2dev version 3.2.6a (Patchlevel 6a (January 2017))
  NEW FEATURES:
    o Distribute transfig.pdf. No need to build it from the TeX sources.
    o Enable reproducible build for svg output.
    o Set the creator to fig2dev, not to the path by which fig2dev is
    invoked.
  BUGS FIXED:
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
    o The svg output now produces correct patterns and pie-wege arcs.
    Property names instead of style attributes are used. Hollow arrow
    heads are really hollow, not filled with white. In the PostScript
    output, this might also clip a bit of the filling underneath an arrow.
    o tikz output: Re-use \dimen \XFigu if it is already defined. Ticket #3.
    o tikz output: A pattern in an object with line width zero and the
    stroke color equal to the fill color would produce a white fill.
    The tikz output now does not try to be smart and puts a pattern, even
    if the result is equal to a solid fill. Ticket #1.
    o pict2e output: Standalone tex-files always include color.sty. #2.
    o pict2e output: A pattern with stroke color equal to fill color is
    rendered as a solid fill.
    o Compiles when gnu iconv and standard iconv are present.</changelog>
  <changelog author="werner@suse.de" date="1486382400">- Fix now failing download source service, that is don't do this</changelog>
  <changelog author="werner@suse.de" date="1511352000">- Added patches
  * fig2dev-3.2.6a-RGBFILE.patch to let rgb.txt be located via
    environment variable FIG2DEV_RGBFILE
  * fig2dev-3.2.6a-man-typo.patch to fix simple typo in manual page
  * fig2dev-3.2.6a-input-sanitizing.patch to do some input
    sanitizing when reading FIG files (bsc#1069257, CVE-2017-16899)
  * fig2dev-3.2.6a-style-overflow.patch</changelog>
  <changelog author="werner@suse.de" date="1535630400">- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140</changelog>
  <changelog author="werner@suse.de" date="1561550400">- Add patch transfig-fix-of-e0c4b024.patch to fix last added upstream
  commit (boo#1136882)</changelog>
  <changelog author="werner@suse.de" date="1565870400">- Add patch transfig-03ea4578.patch from upstream commit 03ea4578
  to fix bsc#1143650 with CVE-2019-14275</changelog>
</package>
<package pkgid="8488c9cb6b0c63b09799b7bcdc49ab6aac35d152295c8164b6d8c52876ad71e3" name="typelib-1_0-Gst-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="ffc538c2921f969e3b728a9ffa13fc09b6fea54ce237adc93d0ff2221d52f98c" name="typelib-1_0-Gst-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="d2d8c84c3ac7430e82cee64e00af769d0eef6c36a8a73431ac45ae9a512dc26d" name="typelib-1_0-Gst-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="8fe595d4ce3a2130e9f06a62dc5699f8609ba037a41209acaa57d6837a5b05a0" name="typelib-1_0-Gst-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="234863ef104f56c27cc1b91a46017fb6a79360987fe3f438e913bbc351bc981c" name="typelib-1_0-Gst-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="cf385254355429b57e0b829dd207b4b9b15c9fa7f49104ac23c88ef230d0c08f" name="typelib-1_0-GstAllocators-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="aa4e722b91bd512fb283b517d0a8c45ff2c44cb388677ce556a04e2ee0dff314" name="typelib-1_0-GstAllocators-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="966f47b894baea789be2736967024a773be3690d0db75ef73bf27a5b01f3a394" name="typelib-1_0-GstAllocators-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9afbd5b42c0a5d34f02e3601e7b891181063fd129d46c428bf591327763b536f" name="typelib-1_0-GstAllocators-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="5c3482bf80773c91d3e9860159c20901bf2e31f071ba656519c60ebd4cb5eddc" name="typelib-1_0-GstAllocators-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="10bc9c520cafcfc97a9fd782e8902f09c1392884451f162e7e8cc92f109fcf3f" name="typelib-1_0-GstApp-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c2c8914898fe9ea25752a59e2c7df7a38affde6a14d8feaa0d704a0e78146f52" name="typelib-1_0-GstApp-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="04a5e39b393f55985c1b5119b03bbafe6bec2b18c7d35a08522720229d6e591b" name="typelib-1_0-GstApp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="db70f819258270746059916525d89e232ed36b17f100d2df5037c738ef5ccce1" name="typelib-1_0-GstApp-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7632d59ee4cba19901834bbbd7dcd305957dc44e450f605c40c52800656f7c78" name="typelib-1_0-GstApp-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="377d100aeb5d9d51902579702c4cb980c97a6c2795d3c2da87ce7649987fc48f" name="typelib-1_0-GstAudio-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="39c5914ec494593cba0a3ca7b32ddc180d027278f01da09b0aa6c34cab70ac32" name="typelib-1_0-GstAudio-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7a5881b63d3736a08a77c90b45916fddbc196102033b245dece33fce9f3e8dbf" name="typelib-1_0-GstAudio-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d8fa1b45dd37b2f15747446e5a9c2825959c65ba57319c6da8cd299ca8044c48" name="typelib-1_0-GstAudio-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a8f2628cbdba44b514eb340033a9c9cebb5f815b5d2abd6465dfb4a9aed9dd66" name="typelib-1_0-GstAudio-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="bbccfbec99e83e9464b6abe9f5b1c2557fa105b2934bc2b984c6d6bde2ae5fcc" name="typelib-1_0-GstGL-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fb2c5e87ae07a3711f17ab4fd6cd2147e60b866955f412624bd57b664e496192" name="typelib-1_0-GstGL-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2783c02368e1433829d29b211afff79a7e348960984014e5c86dde86c65538be" name="typelib-1_0-GstGL-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ca9855440ed2b49a4a92e09172ab81916f085baec8af8aecfe488143227f3f6b" name="typelib-1_0-GstGL-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="8852dce7b310f891c7a370d560539d28e460f2fe31d6096ec65e6d898a5f7ca4" name="typelib-1_0-GstGL-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="efeb67f2d92224d452d2de3cc62b85ab30f8155b0467db8b3602a3d0efc7e0ce" name="typelib-1_0-GstInsertBin-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4ecca79cc978ec0785d4447fde89bccdc264b01ff7cbca4b3ea702061b496437" name="typelib-1_0-GstInsertBin-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6e817307cc750d84e56b5057f12e33bd21fb8fe15d5869336cc14f04511e2556" name="typelib-1_0-GstInsertBin-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0d75147ebf2b2e3049f2fc06b8096f4ebef3d35ce94b6fbda7cfdfdfdd60b6f1" name="typelib-1_0-GstInsertBin-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fbee86fa59b1800b0836ccd0f3fe4bc4eb61ecde4e8aecb0822d7403b80554b1" name="typelib-1_0-GstInsertBin-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="539194aad8aea29ee259de77150d5839e4104f548de2a4801f60d5f2eaeeb47a" name="typelib-1_0-GstMpegts-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="eac60775a84bb58a9eae37ab32f3bca97852467f4e131274b047a74f13c14202" name="typelib-1_0-GstMpegts-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e8bfc660a59ad3d614c9daac0be7b4878f35462969a361016326742e9ee300d6" name="typelib-1_0-GstMpegts-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="a587f58ba7d1709b959908f06979c201082a9904414954b122db5f0a7ca57c08" name="typelib-1_0-GstMpegts-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b735adebd2d9967634217a2c6ac8565dd5fdd8b352b13d8e04a7d8fe5e01367e" name="typelib-1_0-GstMpegts-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e680bc1d4333bbf70a4cad02ad3b64bd616aab6087a4ab78f101fc165f761ae0" name="typelib-1_0-GstPbutils-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="25a0fb4751c2846b9062dd3e5ebb909c8537c3d095aba3dc603073e8c539a6de" name="typelib-1_0-GstPbutils-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ba433ce78d64133d585c3e4f78b977b52f418f8ce5665f7a3207563144da5929" name="typelib-1_0-GstPbutils-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="bb9e19fbb5cd7a729661d0016cca3d4cb4268059db5992443fc186002be2302f" name="typelib-1_0-GstPbutils-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3b76dffb8b0b0b2782eb5b05a13cd96ab959b079ca67fe39c9f34b9abd4655db" name="typelib-1_0-GstPbutils-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="71ff060d89cb47120dfd7b31fabd82ce5dad296cb448ba8e344b8aca36749a4b" name="typelib-1_0-GstPlayer-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="7574cdae25c1b402ef8df28172c4c02e13c54dd312ee438fe1ee614d18f6715c" name="typelib-1_0-GstPlayer-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="778242f69aa00115e685d24a493e2c52a6255a1eedbbf70d99c37dd4de35a874" name="typelib-1_0-GstPlayer-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="28ec917f89d220d8a9a03310a656667f0ba548432e9c319a218656407b4fb0c7" name="typelib-1_0-GstPlayer-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8f524abb7768e4b11f34e50347e5a6aa2e91356a8792265b7a1152765de82615" name="typelib-1_0-GstPlayer-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9ecb5cceabb52e46129c54d432a4aca388c6e7308c079b64e1b81b6edb97db63" name="typelib-1_0-GstRtp-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="5537971bd4b13b3d3fc02fa6da1e682e5cd9ecd03096aef832215b24c01107f9" name="typelib-1_0-GstRtp-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="90c67dc10f7b31b8bfc44a870d0dc35914024f3708bb49dc18ce1e92b2d4e012" name="typelib-1_0-GstRtp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b97ad25d9196d8e1d952aef25c4a9b305db79c46c5d8e3adf7023821d2d56dad" name="typelib-1_0-GstRtp-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6793f7aa97b488a28ebe4c14cb6e709d9a48986a9d04b075d1974130688c51d9" name="typelib-1_0-GstRtp-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d19cc8d3afc466ddbef8478d286095741c258bb58731ca962df093a2d101119e" name="typelib-1_0-GstRtsp-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="482d183d0ef8ab9d85022f0eaea7b3d7c06af030d0945f851ad22593419777c4" name="typelib-1_0-GstRtsp-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1180c260c262315bb9d8e7f5f814f3406c64b3bfabf38781fe7f4baa6d51fab4" name="typelib-1_0-GstRtsp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9252fd5dcad3dc24c1fd58bf80bbddc542ca33d835a4d82f25162e3dce4c696b" name="typelib-1_0-GstRtsp-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="8966cb8850d2960dcab0a5c6b3a40c93b94f8ef66cd31116a1797d91f14affa0" name="typelib-1_0-GstRtsp-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="43895b18e7ab3467b123c2930b8afaf070061d36f6fa9cb3ca567a41190bb482" name="typelib-1_0-GstSdp-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="619e29055b1d39b9600f946454397b29881e033b6b9a644e580d0ad1e67c749e" name="typelib-1_0-GstSdp-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a8927e2327be03d2f4ac62c8c6e743f9901e98cd3e0501504fbe45dbc11a5191" name="typelib-1_0-GstSdp-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c434360e26c8cd0eb5b5780d121b02e40528f491ddc2dbeae692c2cbe8052c7b" name="typelib-1_0-GstSdp-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f5478699a8d6b82a4e8776fa77bca7cddefce12aa7f0eede628a38ffba57f9cd" name="typelib-1_0-GstSdp-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d55e46e2901458aa1394eecb509967f2a58a5275e525257637587b6be373ae28" name="typelib-1_0-GstTag-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="38e0df85202e97da46c4b3b7805daf71c269f573cf4565f96ad84132a9deab46" name="typelib-1_0-GstTag-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4b014324d34549458c4522a8fbd7620c4a33ef7a6ee1a08c91b9d5c5438b6bbc" name="typelib-1_0-GstTag-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1eff0ad6f39a7ee1663464941127dd84d91c2e606fcba24c51a90c9b1941c115" name="typelib-1_0-GstTag-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a0d759b68278988ce33beceb1bc036b84e63f4c2510e31aaf37a3d7e06e9672a" name="typelib-1_0-GstTag-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7877a5dece087a38e7bcc7db3cbdc1b3a857366477c14353e6fdb03b7d50c095" name="typelib-1_0-GstVideo-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2003eead25cccbd66e6dde9c91a30bf0e775368c0efc42a4fa5f784064b4eca1" name="typelib-1_0-GstVideo-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="32be8588f74d97beb519c630ca71af9631e5185412eb63a8ba918b18cb9adda8" name="typelib-1_0-GstVideo-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d246da549e82119c6522633c999529d9db1e3c21cfe894bf165105c80b5e08ba" name="typelib-1_0-GstVideo-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="bf860935b6460450e45553cbab8fc890f729298fb0bd846a50c52857e052e85b" name="typelib-1_0-GstVideo-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="cdd24a1b6b0edfc7f6438f9c31a5f3285249dbad2971931e9dae07e3130f8eb9" name="typelib-1_0-GstWebRTC-1_0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="194d3c3fde036381f8364a524fa675b6635e140510065e36f69e463d95a4432b" name="typelib-1_0-GstWebRTC-1_0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f165a15cf6c3d4caf9e121cb18532cbf692455cf1d94cfdeacae1af115fe44f0" name="typelib-1_0-GstWebRTC-1_0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="d1ead8883abc4c454732f1a48052a8857cd595f53ad1e774d10a8de721fd8628" name="typelib-1_0-GstWebRTC-1_0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4e8ffce900e1c70fca670ce9c5b19b99660bd8941af09e93d3b971b822e91fab" name="typelib-1_0-GstWebRTC-1_0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f8cfc300fed9b4288d5255a9797bf5bff222fc006892e69b1b0b096b05613fed" name="typelib-1_0-Polkit-1_0" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="c048740d97be82688a91544db2049f0c5636eb75cc82393a736784421145ed34" name="typelib-1_0-Polkit-1_0" arch="i586">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="08f90d0c29720999f63d4572a69d66ad29545b6250239014429ae3c7d0011f0e" name="typelib-1_0-Polkit-1_0" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="7dbaaaf2771a1d177b748d32602d572695b5c18f7c4fa1ccd133eca79f5eb168" name="typelib-1_0-Polkit-1_0" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="c882167e03dba6b73325860d6b185463f85f0bcd5fb9d232a3edb617199e3603" name="typelib-1_0-Polkit-1_0" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="4b902fa0de9f4cd82186ca35a64b8339bbb77a53f3f111d4469f6ca1d1946235" name="u-boot" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.1"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="32459ebc94f1ff38bbba33ecd06520b8a9115ac9383e2cccfd86a6a4a05419e8" name="u-boot-dragonboard410c" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="77f3583bc5b1b3e04e52bd3c76f19799d783280086b99677b6f7eb9b999f7783" name="u-boot-dragonboard410c" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="aad5e8b3fedee032c24e569d77bb889f1c853aa6d89cb1f4f8ed8422ab53e43b" name="u-boot-dragonboard410c-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="ef4aa33ae41ef4c083b866ff845a923fe06787ae55d9e23f9593fa1e0fb56b21" name="u-boot-evb-rk3399" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="f04afefd881f3c8add8dbd3dcc40f23406a927c61cbe5bbc13c8d19f13363bdf" name="u-boot-evb-rk3399" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="cda555341d47e89962d784691cca97d4fcf1dcdc861e99eb3606c6b2b25b53fb" name="u-boot-evb-rk3399-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="f95f27901a4423e80dcbd0d99a219b698b3be977243d876dbc87b80d8d8f6b39" name="u-boot-firefly-rk3399" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="7ddc6581fd40cd5ab72ccd3135e2791789fafcd2b2d34c1f432240fe86be1eb9" name="u-boot-firefly-rk3399" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="5d37f8156aacbd5f1badc514ca35130b3200023b24ea7b1fb404cb1294682078" name="u-boot-firefly-rk3399-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="ca36a0c8a2e9007383364723ea386c3e5b3d5ca8be68d2fa4e318285bf8aaab4" name="u-boot-geekbox" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="b8cc6bb8d8b381c9e3df584f8c8e506228b6134b787ccc0614bd414d2def12b2" name="u-boot-geekbox" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="fb340c65c41e27942ef052e4d1058b954b63d91851b10a59b0cfaa9136948c49" name="u-boot-geekbox-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="59a8cd00453a855f780d6c2641fe529ef22d1bd32e137cb416a839095b316e6b" name="u-boot-hikey" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="267265dc4c7dfc423560a53f699941db92b9a313ebfc2ca03289007dc3e018a7" name="u-boot-hikey" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="8623e50fa93d840b27854b5ace62471d02b6cec6147cb664e3bdfb34f14953bd" name="u-boot-hikey-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="330d8b8b3617c5365e46c7cee18830f3b38435fc72933af343dfadf3ac6b78d5" name="u-boot-ls1012afrdmqspi" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="2b8f93881efe8abdb30f886016245999c11fe07d4f65523ccbcf1b66abc1e493" name="u-boot-ls1012afrdmqspi" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="b3175ae167de10fbea3739c79af6c1a6b888f3c780291fb1bdd2fbf106304444" name="u-boot-ls1012afrdmqspi-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="e56ffb9094399aa843ba1fdc79d1cf9017a712fa90eb669cbca96b8c8e61d6a0" name="u-boot-mvebudb-88f3720" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="c17b00ad2e0720176a494beeadad79555be79c1de558dff8cd1a671f387d139b" name="u-boot-mvebudb-88f3720" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="bfb6adc371cf9c82639ebef02aaa2491d992c68f5d13da0c2683d2a99f94889d" name="u-boot-mvebudb-88f3720-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="f5e981b9143aad6b9bf52dd371175674e23dbe2e8eea5fe8e2ff3283047df042" name="u-boot-mvebudbarmada8k" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="0f631fbb4d9946d5c2fb3acd25894f9b6476fc2f713bf372f26abe68463a7d8f" name="u-boot-mvebudbarmada8k" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="ffa6c6b87eac9f86c50d6d513dc1ecc164fbfa708060ad5b0c8eb7b9b602b566" name="u-boot-mvebudbarmada8k-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="7ab24b2dc8947f0e975a755bd6573793ef1cb66bf78905e8bafe7bf85769bad5" name="u-boot-mvebuespressobin-88f3720" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="6464db60da7810f8e8deb8efb2d27785afe49af6142d5cb7b89d751eb33e38b2" name="u-boot-mvebuespressobin-88f3720" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="a7ccfa76bde10a3d765b0d5985678c3ac0ffdeb3f1ea189f98ea4f6df0b5ad66" name="u-boot-mvebuespressobin-88f3720-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="14dbb26543e58e145f6f5c1f7d3cefdce02139b3bd2fbe8011678340fb09e403" name="u-boot-mvebumcbin-88f8040" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="6ef001f9732bb3ee9d68f1b2baad0bb99c309ae43dfc47e8b66e3ae28e1441c8" name="u-boot-mvebumcbin-88f8040" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="e79087b7770f64710dcf383a5240909e6d60bf89940b6c92d1fba70cb175e8d2" name="u-boot-mvebumcbin-88f8040-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="7a64b775ed7e2dfc877a8b047ab3a10ff0e2f7a83c9caed7a0c4cf8b763e47d0" name="u-boot-nanopia64" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="21502e060a4d462adc1eb407a8f106ffebd5a49682a3c91caef707e42fb02a9f" name="u-boot-nanopia64" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="4f0e97a17010d859a84b029f65b0464430bdbe7bcfbc94661c0f91fa5375887c" name="u-boot-nanopia64-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="f690127623273d1dc0ed297fac85a64098bc9a9f577ed6c6113c6839d9a77aac" name="u-boot-odroid-c2" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="d179e6cb21e700e772e8405d40338f44b52adc38a210a0dc775e6499fad79ef5" name="u-boot-odroid-c2" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="ddce15fccde6815c3ba5cf14f066bceebdf9d22ff5790d61058785efce44f89a" name="u-boot-odroid-c2-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="35f07d571c353536bf966bd40a395f43acd0adedc1a4b711fbf18c69baa2d9d3" name="u-boot-orangepipc2" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="9eadf4b306c6152a7634649e51603ac248f28143e37074d29806ebce6a4c2edd" name="u-boot-orangepipc2" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="d2faef672e3e7d4645b5039c1fd33d6fb75e82221de3aaef4bfd18e3e38590c6" name="u-boot-orangepipc2-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="c2291657686da1790d55882ece89872442247df4420309da1162d14be8294906" name="u-boot-p2371-2180" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="dbf4503e4c3eeb62112889b5aa8179c5a5450d2a9fb951421613636cc3101ccc" name="u-boot-p2371-2180" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="84e76fc20869a1eab875f8594bbe650213d50bb08e2b3e363a1268052fcc76c2" name="u-boot-p2371-2180-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="46e07e789a4848ac487818fb4ec10ff45e335628caccde89425e086c909ec5bf" name="u-boot-pine64plus" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="58bc4ab965cbfda4ae68acc58bbecb7cc62ee138315672742a50cb722855fd07" name="u-boot-pine64plus" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="a8b79241ada1a765eaa5e874ba75da03e87ef42a035fac7db3adbf81d60a5df1" name="u-boot-pine64plus-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="4151b9cae9b1d409c1da8a2fa45b5b16417e8bdc081dbdd1a62f3035696662db" name="u-boot-rpi3" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="dbd2d2d156c97dba84407c15a936478b1ed4d3717136c41666db868ee0a40f2e" name="u-boot-rpi3" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="5e530a5c3aa7409c2b7ae57b8e3e962134fceac2315b3b8db888947f5f1dd2c2" name="u-boot-rpi3-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="8bd041ecc842ef9314267b5a2f66273da7e2bf0f667f2482356e29e61daa6f60" name="u-boot-tools" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.1"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="69fd32462a8ee30a7a4a49a97cb5955dc6fa4e22b45f2a7dd25c0f6d1bda24cc" name="u-boot-tools" arch="i586">
  <version epoch="0" ver="2018.03" rel="4.6.1"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="2b7ac1c2fe9a51e824f980d004102d0087d7d8d16cebf545df22425ee7d9ef93" name="u-boot-tools" arch="ppc64le">
  <version epoch="0" ver="2018.03" rel="4.6.1"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="ea3b91fad10ecc2498d894891e6a9723d06882461a2c8193272f83e239a88e5d" name="u-boot-tools" arch="s390x">
  <version epoch="0" ver="2018.03" rel="4.6.1"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="d6d7a9e13860a690fa27cd777957fa0a786cab8414bdfe90f7b23ec667d6d446" name="u-boot-tools" arch="x86_64">
  <version epoch="0" ver="2018.03" rel="4.6.1"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="bc5fea52ed820f7b7146b0ca6fc784fc41102a061a397dadd816bafa8cbf6b85" name="u-boot-xilinxzynqmpzcu102rev10" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="77704ac5d3eb60e4f00509f56cb55d2a1070fd82fd156604ea256e8336e39f15" name="u-boot-xilinxzynqmpzcu102rev10" arch="src">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="788fc868541f67ca6b9f7e92dcfb74d9625048d2029f0d110d54b04e3aedbe96" name="u-boot-xilinxzynqmpzcu102rev10-doc" arch="aarch64">
  <version epoch="0" ver="2018.03" rel="4.6.2"/>
  <changelog author="agraf@suse.com" date="1521115200">- Enable new RPi3 B+ (bsc#1085262)
- Fix network boot (bsc#1070775)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0005-rpi3-Enable-lan78xx-driver.patch
  0006-net-Only-access-network-devices-aft.patch
  0007-rpi-Add-identifier-for-the-new-RPi3.patch
  0008-efi_loader-Fix-network-DP-with-DM_E.patch</changelog>
  <changelog author="agraf@suse.com" date="1521115201">- Add Xilinx ZynqMP ZCU 102 target</changelog>
  <changelog author="agraf@suse.com" date="1522929600">- Fix rainbow screen on 32bit RPis (boo#1086757)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0009-rpi-Allow-to-boot-without-serial.patch</changelog>
  <changelog author="agraf@suse.com" date="1522929601">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0010-mmc-use-core-clock-frequency-in-bcm.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523275200">- Workaround to boot on Chromebook (snow)
- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0011-Temp-workaround-for-Chromebook-snow.patch</changelog>
  <changelog author="agraf@suse.com" date="1523534400">- Package u-boot.elf on Xilinx systems</changelog>
  <changelog author="mbrugger@suse.com" date="1566388800">- Patch queue updated from git://github.com/openSUSE/u-boot.git tumbleweed-2018.03
  * Patches added:
  0012-CVE-2019-13106-ext4-fix-out-of-boun.patch (bsc#1144656)
  0013-CVE-2019-13104-ext4-check-for-under.patch (bsc#1144675)</changelog>
  <changelog author="mbrugger@suse.com" date="1603800000">- Change branch to sle12-sp4</changelog>
  <changelog author="mbrugger@suse.com" date="1603800001">Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
  CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
  CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
  CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
  CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
  CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
  CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
  CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
  CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle12-sp4
  * Patches added:
  0014-CVE-net-fix-unbounded-memcpy-of-UDP.patch
  0015-CVE-nfs-fix-stack-based-buffer-over.patch
  0016-CVE-2019-14194-CVE-2019-14198-nfs-f.patch
  0017-CVE-2019-14195-nfs-fix-unbounded-me.patch
  0018-CVE-2019-14196-nfs-fix-unbounded-me.patch
  0019-CVE-2019-13103-disk-stop-infinite-r.patch
  0020-cmd-gpt-Address-error-cases-during-.patch
  0021-Fix-ext4-block-group-descriptor-siz.patch
  0022-lib-uuid-Fix-unseeded-PRNG-on-RANDO.patch
  0023-image-Check-hash-nodes-when-checkin.patch
  0024-image-Load-the-correct-configuratio.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1603972800">- Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)
- Fix GOP pixel format (bsc#1098447)
- Fix SD writes on Raspberry Pi
- Enable a few more armv7 boards to boot with EFI
- Fix potentially miscompiled runtime service calls
  Patch queue updated from git://github.com/openSUSE/u-boot.git sle-15
  * Patches added:
  0025-dwc2-USB-controller-hangs-with-lan7.patch
  0026-efi_loader-Rename-sections-to-allow.patch
  0027-efi_loader-Fix-GOP-32bpp-exposure.patch
  0028-arm-armv7-allow-unaligned-memory-ac.patch
  0029-efi_loader-allow-unaligned-memory-a.patch
  0030-video-sunxi-de2-Reserve-the-fb-regi.patch
  0031-efi_loader-fix-off-by-one-bug-in-ef.patch
  0032-mmc-Unirqify-bcm2835_sdhost-and-fix.patch
  0033-rpi-Complete-table-of-models-with-n.patch
  0034-efi_loader-Respect-DT-reserved-regi.patch</changelog>
</package>
<package pkgid="646de53f0061b53ae0ae17229db2e635df2f1af810a5cc18573b8dbfa1be0f74" name="ucode-intel" arch="i586">
  <version epoch="0" ver="20201027" rel="3.51.1"/>
  <changelog author="meissner@suse.com" date="1568894400">- Updated to 20190918 bugfix release (bsc#1151232 bsc#1138185)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002d-&gt;0000002e Core Gen5
  HSX-EX       E0       6-3f-4/80 00000014-&gt;00000016 Xeon E7 v3
  BDW-H/E3     E0/G0    6-47-1/22 00000020-&gt;00000021 Core Gen5
  BDX-ML       B0/M0/R0 6-4f-1/ef 0b000036-&gt;0b000038 Xeon E5/E7 v4; Core i7-69xx/68xx
  BDX-DE       V1       6-56-2/10 0000001a-&gt;0000001c Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000017-&gt;07000019 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000015-&gt;0f000017 Xeon D-1557/59/67/71/77/81/87
  BDX-NS       A0       6-56-5/10 0e00000d-&gt;0e00000f Xeon D-1513N/23/33/43/53
  SKX-SP       H0/M0/U0 6-55-4/b7 0200005e-&gt;00000064 Xeon Scalable
  SKX-D        M1       6-55-4/b7 0200005e-&gt;00000064 Xeon D-21xx
  CLX-SP       B1       6-55-7/bf 05000021-&gt;0500002b Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1573041600">- Updated to 20191112 security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000150 Xeon Scalable
  - ICL U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKL H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1573646400">- Updated to 20191112 official security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - AVN          B0/C0    6-4d-8/01           0000012d Atom C2xxx
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000151 Xeon Scalable
  - CLX-SP       B0       6-55-6/bf           0400002c Xeon Scalable Gen2
  - GLK-R        R0       6-7a-8/01           00000016 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  - ICL-U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable
  - SKX-D        M1       6-55-4/b7 02000064-&gt;02000065 Xeon D-21xx
  - CLX-SP       B1       6-55-7/bf 0500002b-&gt;0500002c Xeon Scalable Gen2
  - SKL-H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - GLK          B0       6-7a-1/01 0000002e-&gt;00000032 Pentium J5005/N5000, Celeron J4005/J4105/N4000/N4100
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
  - ---- removed platforms ------------------------------------
  - CFL-H/S      P0       6-9e-c/22 000000a2           Core Gen9
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1574164800">- Updated to 20191115 release (bsc#1157004)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-U23e     K1       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-H/S/E3   N0/R0/S0 6-5e-3/36 000000d4-&gt;000000d6 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - KBL-U23e     J1       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-R U      Y0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000c6-&gt;000000ca Core Gen8 Mobile
  - AML-Y42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen8 Mobile
  - CML-U42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - KBL-G/H/S/X/E3 B0     6-9e-9/2a 000000c6-&gt;000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000c6-&gt;000000ca Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000c6-&gt;000000ca Core Gen8
  - CFL-S        P0       6-9e-c/22 000000c6-&gt;000000ca Core Gen9 Desktop
  - CFL-H/S/E3   R0       6-9e-d/22 000000c6-&gt;000000ca Core Gen9 Desktop, Mobile, Xeon E
  - CML-U62      A0       6-a6-0/80 000000c6-&gt;000000ca Core Gen10 Mobile
- Updated to 20191113 release
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - CFL-S        P0       6-9e-c/22 000000a2-&gt;000000c6 Core Gen9 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
</package>
<package pkgid="6a0ce06a55366ba87a556cf59c0b2a4ee2ef7bdafa7427dc83b1ff76f35f568a" name="ucode-intel" arch="src">
  <version epoch="0" ver="20201027" rel="3.51.1"/>
  <changelog author="meissner@suse.com" date="1568894400">- Updated to 20190918 bugfix release (bsc#1151232 bsc#1138185)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002d-&gt;0000002e Core Gen5
  HSX-EX       E0       6-3f-4/80 00000014-&gt;00000016 Xeon E7 v3
  BDW-H/E3     E0/G0    6-47-1/22 00000020-&gt;00000021 Core Gen5
  BDX-ML       B0/M0/R0 6-4f-1/ef 0b000036-&gt;0b000038 Xeon E5/E7 v4; Core i7-69xx/68xx
  BDX-DE       V1       6-56-2/10 0000001a-&gt;0000001c Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000017-&gt;07000019 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000015-&gt;0f000017 Xeon D-1557/59/67/71/77/81/87
  BDX-NS       A0       6-56-5/10 0e00000d-&gt;0e00000f Xeon D-1513N/23/33/43/53
  SKX-SP       H0/M0/U0 6-55-4/b7 0200005e-&gt;00000064 Xeon Scalable
  SKX-D        M1       6-55-4/b7 0200005e-&gt;00000064 Xeon D-21xx
  CLX-SP       B1       6-55-7/bf 05000021-&gt;0500002b Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1573041600">- Updated to 20191112 security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000150 Xeon Scalable
  - ICL U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKL H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1573646400">- Updated to 20191112 official security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - AVN          B0/C0    6-4d-8/01           0000012d Atom C2xxx
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000151 Xeon Scalable
  - CLX-SP       B0       6-55-6/bf           0400002c Xeon Scalable Gen2
  - GLK-R        R0       6-7a-8/01           00000016 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  - ICL-U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable
  - SKX-D        M1       6-55-4/b7 02000064-&gt;02000065 Xeon D-21xx
  - CLX-SP       B1       6-55-7/bf 0500002b-&gt;0500002c Xeon Scalable Gen2
  - SKL-H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - GLK          B0       6-7a-1/01 0000002e-&gt;00000032 Pentium J5005/N5000, Celeron J4005/J4105/N4000/N4100
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
  - ---- removed platforms ------------------------------------
  - CFL-H/S      P0       6-9e-c/22 000000a2           Core Gen9
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1574164800">- Updated to 20191115 release (bsc#1157004)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-U23e     K1       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-H/S/E3   N0/R0/S0 6-5e-3/36 000000d4-&gt;000000d6 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - KBL-U23e     J1       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-R U      Y0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000c6-&gt;000000ca Core Gen8 Mobile
  - AML-Y42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen8 Mobile
  - CML-U42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - KBL-G/H/S/X/E3 B0     6-9e-9/2a 000000c6-&gt;000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000c6-&gt;000000ca Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000c6-&gt;000000ca Core Gen8
  - CFL-S        P0       6-9e-c/22 000000c6-&gt;000000ca Core Gen9 Desktop
  - CFL-H/S/E3   R0       6-9e-d/22 000000c6-&gt;000000ca Core Gen9 Desktop, Mobile, Xeon E
  - CML-U62      A0       6-a6-0/80 000000c6-&gt;000000ca Core Gen10 Mobile
- Updated to 20191113 release
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - CFL-S        P0       6-9e-c/22 000000a2-&gt;000000c6 Core Gen9 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
</package>
<package pkgid="efaf23a915a64f2f3db56d117586ee275d7f4ff0e9fee49026de79050c14918c" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20201027" rel="3.51.1"/>
  <changelog author="meissner@suse.com" date="1568894400">- Updated to 20190918 bugfix release (bsc#1151232 bsc#1138185)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002d-&gt;0000002e Core Gen5
  HSX-EX       E0       6-3f-4/80 00000014-&gt;00000016 Xeon E7 v3
  BDW-H/E3     E0/G0    6-47-1/22 00000020-&gt;00000021 Core Gen5
  BDX-ML       B0/M0/R0 6-4f-1/ef 0b000036-&gt;0b000038 Xeon E5/E7 v4; Core i7-69xx/68xx
  BDX-DE       V1       6-56-2/10 0000001a-&gt;0000001c Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000017-&gt;07000019 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000015-&gt;0f000017 Xeon D-1557/59/67/71/77/81/87
  BDX-NS       A0       6-56-5/10 0e00000d-&gt;0e00000f Xeon D-1513N/23/33/43/53
  SKX-SP       H0/M0/U0 6-55-4/b7 0200005e-&gt;00000064 Xeon Scalable
  SKX-D        M1       6-55-4/b7 0200005e-&gt;00000064 Xeon D-21xx
  CLX-SP       B1       6-55-7/bf 05000021-&gt;0500002b Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1573041600">- Updated to 20191112 security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000150 Xeon Scalable
  - ICL U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKL H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1573646400">- Updated to 20191112 official security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - AVN          B0/C0    6-4d-8/01           0000012d Atom C2xxx
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000151 Xeon Scalable
  - CLX-SP       B0       6-55-6/bf           0400002c Xeon Scalable Gen2
  - GLK-R        R0       6-7a-8/01           00000016 Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  - ICL-U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable
  - SKX-D        M1       6-55-4/b7 02000064-&gt;02000065 Xeon D-21xx
  - CLX-SP       B1       6-55-7/bf 0500002b-&gt;0500002c Xeon Scalable Gen2
  - SKL-H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - GLK          B0       6-7a-1/01 0000002e-&gt;00000032 Pentium J5005/N5000, Celeron J4005/J4105/N4000/N4100
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
  - ---- removed platforms ------------------------------------
  - CFL-H/S      P0       6-9e-c/22 000000a2           Core Gen9
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)</changelog>
  <changelog author="meissner@suse.com" date="1574164800">- Updated to 20191115 release (bsc#1157004)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - SKL-U/Y      D0       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-U23e     K1       6-4e-3/c0 000000d4-&gt;000000d6 Core Gen6 Mobile
  - SKL-H/S/E3   N0/R0/S0 6-5e-3/36 000000d4-&gt;000000d6 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - KBL-U23e     J1       6-8e-9/c0 000000c6-&gt;000000ca Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - KBL-R U      Y0       6-8e-a/c0 000000c6-&gt;000000ca Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000c6-&gt;000000ca Core Gen8 Mobile
  - AML-Y42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen8 Mobile
  - CML-U42      V0       6-8e-c/94 000000c6-&gt;000000ca Core Gen10 Mobile
  - KBL-G/H/S/X/E3 B0     6-9e-9/2a 000000c6-&gt;000000ca Core Gen7 Desktop, Mobile, Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000c6-&gt;000000ca Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000c6-&gt;000000ca Core Gen8
  - CFL-S        P0       6-9e-c/22 000000c6-&gt;000000ca Core Gen9 Desktop
  - CFL-H/S/E3   R0       6-9e-d/22 000000c6-&gt;000000ca Core Gen9 Desktop, Mobile, Xeon E
  - CML-U62      A0       6-a6-0/80 000000c6-&gt;000000ca Core Gen10 Mobile
- Updated to 20191113 release
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- updated platforms ------------------------------------
  - CFL-S        P0       6-9e-c/22 000000a2-&gt;000000c6 Core Gen9 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1579089600">- reverted the entry below to 02000064 due to occasional faults (bsc#1160478)
  - SKX-SP       H0/M0/U0 6-55-4/b7 02000064-&gt;02000065 Xeon Scalable</changelog>
  <changelog author="meissner@suse.com" date="1587470400">- updated skylake microcode to the current version. (bsc#1169570)
  - 02000064-&gt;02006901</changelog>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
</package>
<package pkgid="b362e6e27d07c02f2e1227c1a796080946fab4bef60c8d5b412f1553f1cad160" name="udev" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="48e0c68a178c617e911116227d6c558b917454ade67da2b9f7470283937217c0" name="udev" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="45a90bae8cf6f04f4bf821df939c255b53fe04a57c97b8be8565eddc5ca576e2" name="udev" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="ed117d8e253b58f40fc46af39be01e0f11e23fbc5327f2106602080f84638a9f" name="udev" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="0deacc09db075a004a12a2d0edcb7d20990364a215f78d53596be632ed03b5c4" name="udev" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="5374a56da21cf66cd8258a3f86cb2e404ddb29021a81d5aa1c32ec959fdb11c9" name="udev-mini" arch="aarch64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="e6d548d71424d4509a084dcfa1d1feade4e8c0d11ff75167098ecdd17d492ce2" name="udev-mini" arch="i586">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="a33960643ad531301ca91f4ae6896564ef0b5265994ca67fa7811d01206f0345" name="udev-mini" arch="ppc64le">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="d786ccff23ddb21e062124874a21ddd02efd58479bff8c1aab0377ed7be2622d" name="udev-mini" arch="s390x">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="7991f84064b88965a5f8d61abe6ea7c767ac8166ae5b7fd4da8d3e25bd02a540" name="udev-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="24.61.1"/>
  <changelog author="fbui@suse.com" date="1591099200">- Import commit dca9b964628d1527a25d633f7728fe979f422358
  8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072)
  b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set
  2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488)
  29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too
  20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538)
  7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
  5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145)
  2f86bc54bd test-engine: manager_free() was called too early
  cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)</changelog>
  <changelog author="fbui@suse.com" date="1592913600">- Fix inconsistent file modes for some ghost files (bsc#1173227)
  Ghost files are assumed by rpm to have mode 000 by default which is
  not consistent with file permissions set at runtime.
  Also /var/lib/systemd/random-seed was tracked wrongly as a
  directory.
  Also don't track (ghost) /etc/systemd/system/runlevel*.target
  aliases since we're not supposed to track units or aliases user
  might define/override.</changelog>
  <changelog author="fbui@suse.com" date="1593000000">- migrate-sysconfig-i18n.sh: fix marker handling  (bsc#1173229)
  The marker is used to make sure the script is run only once. Instead
  of storing it in /usr, use /var which is more appropriate for such
  file.
  Also make it owned by systemd package.</changelog>
  <changelog author="fbui@suse.com" date="1593432000">- Fix bsc#1173422
  Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Add 0002-test-seccomp-log-function-names.patch
  Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch</changelog>
  <changelog author="fbui@suse.com" date="1596456000">- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc
  85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539)
  0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336)
  b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991)
  5adfe116ed man: explain precedence for options which take a list (#7010)
  392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5)
  c45abe3a2f udev-event: fix timeout log messages</changelog>
  <changelog author="fbui@suse.com" date="1596456001">- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f
  0509116a5d pid1: improve message when setting up namespace fails
  40510f1a7a execute: let's close glibc syslog channels too
  e22977f3b2 execute: normalize logging in execute.c
  ed52035555 execute: fix typo in error message (#6881)
  7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary
  dbc8525a68 execute: make use of the new logging mode in execute.c
  89d456e4c7 log: add a mode where we open the log fds for every single log message
  32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too
  30a5b8d428 execute: downgrade a log message ERR ? WARNING, since we proceed ignoring its result
  f52bed2823 execute: rework logging in setup_keyring() to include unit info
  91cbb68dec execute: improve and augment execution log messages
  These are simple commits that improve logging when PID1 fails at
  setting a namespace up when spawning a command specified by
  'Exec*='. This should help us track a hard to reproduce bug which
  prevent apache from reloading (bsc#1172824, bsc#1142733)</changelog>
  <changelog author="fbui@suse.com" date="1600084800">- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502)
  It contains a patchset that backports user-runtime-dir@.service,
  which is improves latency and reliability when users log in/out
  repeatedly and quickly during a relative short period of time.</changelog>
  <changelog author="fbui@suse.com" date="1600257600">- Fix bsc#1167471 bsc#1154935
  Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch
  Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch
  Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch
  Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch
  Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch
  Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch</changelog>
  <changelog author="fbui@suse.com" date="1601640000">- Import commit e72f953aa84be08beb97cb4a7630e51e01639377
  da944a39f8 udevadm: rename option '--log-priority' into '--log-level'
  64b89364ee udev: rename kernel option 'log_priority' into 'log_level'
  46d1536437 fstab-generator: add 'nofail' when  NFS 'bg' option is used (bsc#1176513)</changelog>
  <changelog author="fbui@suse.com" date="1602072000">- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969
  2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422)
  99eff504a1 test-seccomp: log function names
  2355b45978 test-seccomp: add log messages when skipping tests
  0246b221d1 add false option for tests (#7778)
  2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800)
  3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null
- Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch
  Drop 0002-test-seccomp-log-function-names.patch
  Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch
  These patches have been imported in SUSE/v234 branch</changelog>
</package>
<package pkgid="615d6cb7d7ab18aa7512694e38f6fc5d0d3747a9eb90c5bd282d40294c29069c" name="vim-plugin-nginx" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="a69dd9591b59c13d52330387880d8b35d99a55228db8f6c86afa249bec09e98f" name="vim-plugin-nginx" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="76c916d1b2fc3f80020174a1d0e4c1b50f6c19cfae6f6d3b162c727c3b737dbc" name="vim-plugin-nginx" arch="noarch">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="7d09f21b7f30f6acae234245257460a1ec0e731af6c7c604aae94be957fb294d" name="virt-bootstrap" arch="src">
  <version epoch="0" ver="1.0.0" rel="5.3.124"/>
  <changelog author="cbosdonnat@suse.com" date="1504785600">- Release 1.0.0 (fate#321985)</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Ensure neutrality of descriptions.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- excludearch for i586 and s390 (bsc#1085644)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1562673600">- Allow providing the container's root password using a file.
  bsc#1140750, CVE-2019-13314
  added patch:
    5cdf0c9c-Don-t-expose-the-root_password-via-command-line.patch</changelog>
</package>
<package pkgid="d6e9845079f8805cd9abf061fe73280d47cc82e8a6e6ed8ce30cab4f02e3282b" name="wallpaper-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="cf31ca600f5593807bae4895fbe4b0f9e995cfe981feaf11091c58cbc1b601bd" name="wireshark" arch="aarch64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="7e6e5b0ab636d27d79ea0ac4cb7c5bd970efbdf67c13e60468b6b51b9e9ec4ff" name="wireshark" arch="i586">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="9912867b9d2890d538eca7507fd7d05f004cd86a4a06b21d2cf6d604be01682b" name="wireshark" arch="ppc64le">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="6c4cd57211ee910bd4c610e8943c070b3b4e27d9beb76ea1f7825ea24f7e62a5" name="wireshark" arch="s390x">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="11f7750385a24bcc6fc76c948d45f1a2b9054b2cf95e75a849aee6173582bc28" name="wireshark" arch="src">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="11766cfa1f14a503186012b79d0c4fb2591cea455635bda4382697010e446fc1" name="wireshark" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="114991f45bbdd80fffce1573040ff45562b0da74ab9247460bed2d4b0c977ad7" name="wireshark-devel" arch="aarch64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="8b6988c7dbbbd985aa2ca281b1b39e2f779f3a4d4d74cb8aee8c8f826b9c0ecd" name="wireshark-devel" arch="i586">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="5e0affc5e7674f082cd9da78104b26ae05e30d3db4a0457806453ae5703ef204" name="wireshark-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="333b9eab427b568f6ed757dfb0bf1927e5998352f5e3b0ac0f9834beb4a184bc" name="wireshark-devel" arch="s390x">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="5d389b9c29d7f5497898eaf7e90e6c59306bbd169ca7479ee475dbdabcc114f9" name="wireshark-devel" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="5f4388b3de53fa1df57c7f038f5579b790dca34289a31d8f393fafed56b52c77" name="wireshark-plugin-libvirt" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="827d132129103e7030fd47a929c32b75c6290004a3b94a52d8e86f49e85f0c70" name="wireshark-plugin-libvirt" arch="i586">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="5e9c543e08a42fe4384ea39afcc3af7a4b7b0d8c00f478e28dfa8911c5033cff" name="wireshark-plugin-libvirt" arch="ppc64le">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="a261ffca8800fa7a3b9126c4d2d806da7a44b1792e0e6e9b85a648773a375ffb" name="wireshark-plugin-libvirt" arch="s390x">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="07678334c897a8d83ef9c06a620fdfc4445e0a75a7e7437c82c0655915965284" name="wireshark-plugin-libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="9.35.1"/>
  <changelog author="jfehlig@suse.com" date="1560513600">- api: disallow virConnectGetDomainCapabilities,
  virDomainManagedSaveDefineXML, and virDomainSaveImageGetXMLDesc
  on read-only connections
  CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc.patch,
  CVE-2019-10166-api-disallow-virDomainManagedSaveDefineXML.patch,
  CVE-2019-10167-api-disallow-virConnectGetDomainCapabilities.patch,
  CVE-2019-10161, CVE-2019-10166, CVE-2019-10167
  bsc#1138301, bsc#1138302, bsc#1138303</changelog>
  <changelog author="jfehlig@suse.com" date="1560945600">- util: fix copying bitmap to larger data buffer
  51f9f80d-fix-copying-bitmaps.patch
  bsc#1138734</changelog>
  <changelog author="jfehlig@suse.com" date="1564056000">- qemu: Add support for overriding max threads per process limit
  d5572f62-qemu-support-override-max-thread.patch
  bsc#1133719</changelog>
  <changelog author="jfehlig@suse.com" date="1565352000">- logging: ensure virtlogd rollover takes priority over logrotate
  975b004d-virtlogd-over-logrotate.patch
  bsc#1137137</changelog>
  <changelog author="jfehlig@suse.com" date="1566907200">- virsh: support for setting precopy bandwidth in migrate
  3d179919-virsh-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1567512000">- virsh: use upstream name for migration precopy bandwidth parameter
  f4bdd829-rename-precopy-bandwidth.patch
  bsc#1145586</changelog>
  <changelog author="jfehlig@suse.com" date="1571140800">- apparmor: avoid copying empty profile name
  281a7f1d-apparmor-avoid-copying-empty-profile-name.patch
  bsc#1149100</changelog>
  <changelog author="jfehlig@suse.com" date="1586520000">- storage: Fix daemon crash on lookup storagepool by targetpath
  dfff16a7-CVE-2020-10703.patch
  bsc#1168683</changelog>
  <changelog author="jfehlig@suse.com" date="1590494400">- libxl: Fix lock manager lock ordering
  2552752f-libxl-fix-lock-manager-lock-ordering.patch
  bsc#1171701</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- CVE-2020-15708: Add a note to libvirtd.conf about polkit auth in
  SUSE distros
  b196f8fc-CVE-2020-15708-doc.patch
  bsc#1174955
- CVE-2020-25637: qemu: agent: set ifname to NULL after freeing
  955029bd-CVE-2020-25637.patch,
  50864dcd-CVE-2020-25637.patch,
  e4116eaa-CVE-2020-25637.patch,
  a63b48c5-CVE-2020-25637.patch
  bsc#1177155</changelog>
</package>
<package pkgid="35db0e1b6c5f94d321bc14e66aefc2963480335c596eff9369ebd9fd7446bcb8" name="wireshark-plugin-libvirt" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="17da1df3e2314620841ebd8450c69451f5a66e7ecd2778d50f5dc82feb98cff4" name="wireshark-plugin-libvirt" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ffbab74005330febcdffdad152c55b6af624198db4f333503d3353c5cc3763e5" name="wireshark-plugin-libvirt" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c375e4383535fffc9b0bb9a494d9a06794920f659beb545de44869510e480c3c" name="wireshark-plugin-libvirt" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f2b061c259cd9af977abe3c50894c0cd62e3377ef78191e1295b63c93a926ac2" name="wireshark-plugin-libvirt" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d5ff4ea18712151b45829e5d891a35e67bea0c3f0b7ce522dd0c5cc0cc293427" name="wireshark-ui-qt" arch="aarch64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="a18f7fa7a79cd5498ff55a7c4899f5d1473c2cbbe05200e8602f775265c03b6f" name="wireshark-ui-qt" arch="i586">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="0189b4bb353cbd12ae19f2b9cdc0a06af7255da29cbd7219c74368069957f6dc" name="wireshark-ui-qt" arch="ppc64le">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="a3f477a52c4453aa3b2a51ec1bb5a28ef6394ff683e3736572a6262271c114ee" name="wireshark-ui-qt" arch="s390x">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="8539f13d7afe03d0a00e55b4e623c9eccddd1449f799191cb0a4e1600311ee86" name="wireshark-ui-qt" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="3.41.1"/>
  <changelog author="rfrohl@suse.com" date="1579176000">- wireshark 3.2.1
  * CVE-2020-7044: WASSP dissector crash (boo#1161052)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1579780800">- Fixed build against SLE flavors</changelog>
  <changelog author="rfrohl@suse.com" date="1582804800">- wireshark 3.2.2 (boo#1165241)
  * CVE-2020-9431: LTE RRC dissector memory leak.
  * CVE-2020-9430: WiMax DLMAP dissector crash.
  * CVE-2020-9428: EAP dissector crash.
  * CVE-2020-9429: WireGuard dissector crash.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1583496000">- Remove dependency on brotli, only the library is needed.</changelog>
  <changelog author="rfrohl@suse.com" date="1586433600">- wireshark 3.2.3 (boo#1169063)
  * CVE-2020-11647: The BACapp dissector could crash
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1589976000">- wireshark 3.2.4
  * CVE-2020-13164: NFS dissector crash (boo#1171899)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.4.html</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1591358400">- Add _constraints for ppc/ppc64le that need more than 3GB to build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593604800">- Wireshark 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (boo#1173606)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
- make verification of package source signatures compatible with
  source_validator</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1597233600">- Wireshark 3.2.6:
  * CVE-2020-17498: Kafka dissector crash (boo#1175204)
  * Further features, bug fixes and updated protocol support as
    listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-3.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1600948800">- wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (boo#1176908)
  * CVE-2020-25862: TCP dissector crash (boo#1176909)
  * CVE-2020-25866: BLIP dissector crash (boo#1176910)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html</changelog>
</package>
<package pkgid="d3e1b29654d6279fa9d707a1b1a337ec6a6da5e29b025d159c0598dcb84b8b67" name="xen" arch="aarch64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="19e64ed917de7076ae648534f94ecd7a32fdbefae4957219df4ab9819ae79c25" name="xen" arch="src">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="a4f68a1325956d3f3ae3afce7565a6511a960e2fd535fe82f88b81067d0f1129" name="xen" arch="x86_64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="d22006ea47acef831066365f3fed3c545b5fc66d6e4c8824603a2cdf8067f28d" name="xen-devel" arch="aarch64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="8857b10773bcb87e4a0ae85d086a8232f05ae758f2d81894948ad63f5f09b417" name="xen-devel" arch="i586">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="15c14efe13e947ae72ee68bf1f20ce05819db06e73076267e561047fc28f8e90" name="xen-devel" arch="x86_64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="c52aaae9e099b473183d8b438408d22a002a823050b5ad1b00c85d90ac33bbcb" name="xen-doc-html" arch="aarch64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="2f57a8eb6f737fdfb71e16b695d316f7c100d3aa7f3cecb725161d02c245f6bd" name="xen-doc-html" arch="x86_64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="d10269d787eb093000a26da9a5f5048fdbf06597adfdb26191d754efc430e559" name="xen-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="18a8f7efe67a884763ee02c4d8f1bfb20a9f7b89cc9563e710d7c846f6f921f9" name="xen-libs" arch="aarch64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="e8ce7af26bdbbc6797ef3a309d06f826f603681557257063312c73f5d91284fd" name="xen-libs" arch="i586">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="5d86b7b6a7a7cc1990cf293df67fc1a9fff7ea7a3a4d6253292aa2eb927e0bff" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="962b39caf576f8f5c48c8996ed8d8f24d841f4f7e95818a1fef04f1a09858d99" name="xen-libs-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="1037a9d3b7a491c2dfcab65e424a6aaf69dc21f85bd54d98059d02ba19dfe3ad" name="xen-tools" arch="aarch64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="f512c7680cb5f7bdc345e8757d6f7fb7a0be5295062be176f7a0a6738234113b" name="xen-tools" arch="x86_64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="4d71e77656d140e48e469023d90322c017e49a6303a3ffcd65cc55b9a7bcd6a0" name="xen-tools-domU" arch="aarch64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="7657050e3a9d1b71d9893b35b9613a7eda6a7d5cd25d48d42868cf8a8cdbacfe" name="xen-tools-domU" arch="i586">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="43d8d476c41a7faad2d36c1112ba28af147930ba599205a3cc3294cac60542f6" name="xen-tools-domU" arch="x86_64">
  <version epoch="0" ver="4.10.4_18" rel="3.44.1"/>
  <changelog author="carnold@suse.com" date="1586865600">- bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
  handling in GNTTABOP_copy (XSA-318)
  xsa318.patch</changelog>
  <changelog author="carnold@suse.com" date="1590667200">- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  xsa320-1.patch
  xsa320-2.patch
- Adjust 5dcae816-x86-spec-ctrl-mitigate-TAA.patch for XSA-320</changelog>
  <changelog author="carnold@suse.com" date="1593432000">- bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
  error handling in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
  paths in x86 dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
  cache write- back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
  modification of live EPT PTE
  xsa328-1.patch
  xsa328-2.patch</changelog>
  <changelog author="ohering@suse.de" date="1593518400">- Add libxc.migrate_tracking.patch to track live migrations
  unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.</changelog>
  <changelog author="ohering@suse.de" date="1594987200">- Enhance libxc.migrate_tracking.patch
  After transfer of domU memory, the target host has to assemble
  the backend devices. Track the time prior xc_domain_unpause.</changelog>
  <changelog author="carnold@suse.com" date="1595505600">- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
  attach on next reboot while it should be live attached
  ignore-ip-command-script-errors.patch</changelog>
  <changelog author="ohering@suse.de" date="1599652800">- Enhance libxc.migrate_tracking.patch
  Print number of allocated pages on sending side, this is more
  accurate than p2m_size.</changelog>
  <changelog author="ohering@suse.de" date="1599825600">- Escape some % chars in xen.spec, they have to appear verbatim</changelog>
  <changelog author="carnold@suse.com" date="1600257600">- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
  timers between x86 HVM vCPU-s (XSA-336)
  xsa336.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
  reading back hardware registers (XSA-337)
  xsa337-1.patch
  xsa337-2.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
  channels may not turn invalid (XSA-338)
  xsa338.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
  DoS via SYSENTER (XSA-339)
  xsa339.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
  barriers when accessing/allocating an event channel (XSA-340)
  xsa340.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
  channels available to 32-bit x86 domains (XSA-342)
  xsa342.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
  evtchn_reset() (XSA-343)
  xsa343-1.patch
  xsa343-2.patch
  xsa343-3.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
  evtchn_reset() / evtchn_destroy() (XSA-344)
  xsa344-1.patch
  xsa344-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1602590400">- bsc#1177409 - VUL-0: xen: x86 PV guest INVLPG-like flushes may
  leave stale TLB entries (XSA-286)
  xsa286-0.patch
  xsa286-1.patch
  xsa286-2.patch
  xsa286-3.patch
  xsa286-4.patch
  xsa286-5.patch
  xsa286-6.patch
- bsc#1177412 - VUL-0: xen: Race condition in Xen mapping code
  (XSA-345)
  xsa345-1.patch
  xsa345-2.patch
  xsa345-3.patch
- bsc#1177413 - VUL-0: xen: undue deferral of IOMMU TLB flushes
  (XSA-346)
  xsa346-1.patch
  xsa346-2.patch
- bsc#1177414 - VUL-0: xen: unsafe AMD IOMMU page table updates
  (XSA-347)
  xsa347-1.patch
  xsa347-2.patch</changelog>
</package>
<package pkgid="8a6599083cc43a80f469b7206de8171362aea8e7ed1883fae0ed5fdc1e1c73f2" name="xorg-x11-Xvnc" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="d5c8dcd354e75118c564bf066102783f537547c05b54052574c13d9487a6bcff" name="xorg-x11-Xvnc" arch="i586">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="09af10053fd45eeda946b3aa0f39b691d3a4a8b7810f133790b9744dbf649864" name="xorg-x11-Xvnc" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="4d4dd8a0bc656b5d57904017981fd6e1c1c08d81d38734ea3fc7fb7ecfafc30f" name="xorg-x11-Xvnc" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="fdbbd09a002500b0194e4736a1b87be4df620975ca79db34fc530f21b4889aa9" name="xorg-x11-Xvnc" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="d246572c85f7c20ee7acd9ef25cc406c36cccbee07b603732407519bbffbf51c" name="xorg-x11-Xvnc-java" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="cd97b2bc1076a50021c81bb1a32e3c6de1f5fd0a137d00df8639295808ab23f1" name="xorg-x11-Xvnc-novnc" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="13.14.1"/>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="sndirsch@suse.com" date="1578484800">- TigerVNC security fix:
  0001-Make-ZlibInStream-more-robust-against-failures.patch
  0002-Encapsulate-PixelBuffer-internal-details.patch
  0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
  0004-Add-write-protection-to-OffsetPixelBuffer.patch
  0005-Handle-empty-Tight-gradient-rects.patch
  0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
  0007-Fix-depth-sanity-test-in-PixelFormat.patch
  0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
  0009-Remove-unused-FixedMemOutStream.patch
  0010-Use-size_t-for-lengths-in-stream-objects.patch
  0011-Be-defensive-about-overflows-in-stream-objects.patch
  0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
  0013-Handle-pixel-formats-with-odd-shift-values.patch
  * stack use-after-return due to incorrect usage of stack memory
    in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
  * improper value checks in CopyRectDecode may lead to heap
    buffer overflow (CVE-2019-15692, bsc#1160250)
  * heap buffer overflow in TightDecoder::FilterGradient
    (CVE-2019-15693, bsc#1159858)
  * improper error handling in processing MemOutStream may lead
    to heap buffer overflow (CVE-2019-15694, bsc#1160251
  * stack buffer overflow, which could be triggered from
    CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)</changelog>
  <changelog author="sndirsch@suse.com" date="1601035200">- CVE-2020-26117: Server certificates were stored as certiticate
  authoritied, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (boo#1176733)
  * U_0001-Properly-store-certificate-exceptions.patch,
    U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
  * Properly store certificate exceptions (boo#1176733)
  * U_Move-UserPasswordGetter-out-of-CConn.patch
  * needed for applying U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch
- adjusted u_tigervnc-add-autoaccept-parameter.patch and applying
  it last</changelog>
</package>
<package pkgid="62083b44a24624296063b7b67e9a97b5e5c6023fd094ce39651a2de8298adbbd" name="xscreensaver" arch="aarch64">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="b9d4f34da6d6e789d3f894342ff02a75bd3846d5f223f642e2788f19bb4691a8" name="xscreensaver" arch="i586">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="5e3f7bdb942e6e28ca8d5385c6a5c4966a6e4a92604afb458da72039dd3c526e" name="xscreensaver" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="36ae0b9f5ff841aa480bd03e51c0d595bb93d44ce4a33c609b70194765639de2" name="xscreensaver" arch="s390x">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="729e0c1dfae70aa179a9a331a0b89ddcbb815216af478edc8c6ae4cb06f13d5f" name="xscreensaver" arch="src">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="93fac9b3d25f8697e8e31fe5c463820115708a4b29d3c0eba08294125e70e299" name="xscreensaver" arch="x86_64">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="352ba6b4c79559221208ac4cbdda3eeefe77aca55e1023f8cd9edaeff766f325" name="xscreensaver-data" arch="aarch64">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="51afea1c103da0495603b0ef426ce204690e1ff031559bd3f65a03b5b3ac9dcf" name="xscreensaver-data" arch="i586">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="d8ca5778e0918562a35647c7359f4a3dff2aaa0bfe3b070552257ea79ca2b512" name="xscreensaver-data" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="500fd4772f08003709b620c5f82cac7991a10a2e4425ebe97fe8b50a1121f555" name="xscreensaver-data" arch="s390x">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="48f8c11086ed097efb1c3afa5e3e3e18aa7d1306248504086cf990d1699f080b" name="xscreensaver-data" arch="x86_64">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="e22630c8f7ed141f9cb085200cfbdd0f1dc6fcbd95842c26c4f41a8049bb10ba" name="xscreensaver-data-extra" arch="aarch64">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="e568e7c912eea2f51b2dadd0407979b0da3723b35833c9e1b2a8e71175a83ede" name="xscreensaver-data-extra" arch="i586">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="5dcc8454cbf3ff06c2ca16759c70c7032b4fa2600baa5337eb0c741a8e60c528" name="xscreensaver-data-extra" arch="ppc64le">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="88814fd8d0d81ab1671a132920ec579b89925deb63d02289d9124f1c08658024" name="xscreensaver-data-extra" arch="s390x">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="d13b68ab04e6314c9261c81279f4f65d83b7710664631fd0d20d13d6808fd991" name="xscreensaver-data-extra" arch="x86_64">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="f723311a09e03b53ad0afad406bd972127628d9aa752c6cd7bca976878edab72" name="xscreensaver-lang" arch="noarch">
  <version epoch="0" ver="5.44" rel="5.3.1"/>
  <changelog author="sbrabec@suse.com" date="1446724800">- Update to version 5.34:
  * Fixed a crash when hot-swapping monitors while locked
    (bsc#952062, CVE-2015-8025).
  * Fixed some incorrect output from `xscreensaver-command -watch'.</changelog>
  <changelog author="sfalken@opensuse.org" date="1488196800">- Added new hacks to xscreensaver-data-extra.list
- Rebased patches:
  * xscreensaver-disable-upgrade-nagging-message.patch
  * xscreensaver-slideshow-dri-detect.patch
- Update to 5.36:
  * New hacks, `discoball', `cubetwist', `cubestack', `splodesic'
    and `hexstrut'.
  * OSX: loading image files works in `dymaxionmap', `glplanet',
    `lavalite', `pulsar', `gleidescope' and `extrusion'.
  * Several new programs in `m6502'.
  * `rotzoomer -mode circle'.
  * Better titles in `photopile'.
- Update to 5.35:
  * New hacks, `dymaxionmap', `unicrud', `energystream', `raverhoop'
    and `hydrostat'.
  * Added Windows 10 to `bsod'.
  * X11: ignore WM_USER_TIME property changes with days-old timestamps.
    Thanks, KDE.
  * MacOS, iOS: Better fonts in `BSOD' and `memscroller'.
  * MacOS 10.8 or later and iOS 6.0 or later are now required, since
    Xcode 6 can no longer build executables that work on older OSes.
  * Many, many Android improvements.
  * iOS: Fixed rotation to work with the new iOS 8+ API.
  * X11: `pong' is now playable.</changelog>
  <changelog author="sbrabec@suse.com" date="1501070400">- Update to version 5.37:
  * New hack vigilance.
  * Updates of bsod and webcollage.
  * Bug fixes.
- Added vigilance hack to xscreensaver-data-extra.list.
- Split -lang package with translations.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Fix requires for /sbin/unix2_chkpwd [bsc#1067103]</changelog>
  <changelog author="mgorse@suse.com" date="1511352000">- Remove libgnome-devel from BuildRequires; appears to be unused
  (boo#1067727).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- remove xorg-x11-devel from buildrequires, replaced
  by extensive list of pkgconfig() style deps,</changelog>
  <changelog author="sbrabec@suse.com" date="1542283200">- Update to version 5.40:
  * New hacks filmleader vfeedback glitchpeg, razzledazzle,
    peepers, crumbler, maze3d and esper.
  * webcollagenow works with ImageMagick.
  * Improvemenrs of GLPlanet, DymaxionMap, Tessellimage, XAnalogTV.
  * More heuristics for using RSS feeds as image sources.
  * Built-in image assets are now PNG instead of XPM or XBM.
  * Better font-loading fallback.
- Refresh xscreensaver-disable-upgrade-nagging-message.patch.
- Remove obsolete --with-xpm.
- When we are disabling nagging message then reports sent be to us
  (bnc#890595, xscreensaver-bug-reports.patch).
- Lock after completing fade
  (boo#1101393, xscreensaver-lock-after-fade.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1561550400">- no longer require Xxf86misc extension, which is no longer supported
  with xorgproto 2019.1; it has been removed from Xserver years ago
  anyway</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 5.43:
  * New hacks GravityWell, DeepStars, handsy.
  * GLPlanet now supports the Mercator projection.
  * Bouncing Cow has mathematically ideal cows.
  * Foggy toasters.
  * Unknown Pleasures can now use an image file as a clip mask.
  * Updated webcollage for recent changes.
  * Added some sample unlock dialog color schemes to the .ad file.
  * On systemd systems, closing your laptop lid might actually lock
    your screen now, maybe (boo#1101393).
  * sonar can ping without being setuid by using setcap.
  * Those new font-loading fallback heuristics work again. Oops.
  * Fixed `noof' from displaying minimalistically.
  * Rewrote `unknownpleasures' to be faster, and a true waterfall
    graph.
  * If the xscreensaver daemon is setuid, then we can implore the
    kernel's out-of-memory killer to pretty please not unlock the
    screen.
  * Fix several bugs (fixes BadWindow error bsc#1165170).
- Drop xscreensaver-lock-after-fade.patch. Upstream has a different
  fix (boo#1101393).
- Refresh xscreensaver-default-screensaver.patch.
- Update xscreensaver-data-extra.list and xscreensaver-data.list.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1585396800">- update to 5.44 (ECO-2755):
  * New hacks, gibson, etruscanvenus and scooter
  * BSOD supports Tivo and Nintendo
  * New color options in romanboy, projectiveplane, hypertorus and
    klein
  * Performance tweaks for eruption, fireworkx, halftone, halo,
    moire2, rd-bomb
  * X11: Always use $HOME/.xscreensaver, not getpwuid's directory
  * Various bug fixes</changelog>
</package>
<package pkgid="a1ce83e3deacb76e7a2ddb694c53ba891f9914ee9fb1aec9bab26b00f9d88d21" name="xstream" arch="noarch">
  <version epoch="0" ver="1.4.16" rel="3.8.1"/>
  <changelog author="fstrba@suse.com" date="1559649600">- Initial packaging of xstream 1.4.9</changelog>
  <changelog author="fstrba@suse.com" date="1610971200">- Upgrade to 1.4.14
  * fixes bsc#1180994, CVE-2020-26217
- Remove patches:
  * 0001-Prevent-deserialization-of-void.patch
  * xstream-1.4.9-javadoc.patch
    + integrated in upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1610971201">- Upgrade to 1.4.15
  * fixes bsc#1180146, CVE-2020-26258 and bsc#1180145,
    CVE-2020-26259</changelog>
  <changelog author="fstrba@suse.com" date="1618488000">- Upgrade to 1.4.16
  * Security fixes:
    + bsc#1184796, CVE-2021-21351: remote attacker to load and
    execute arbitrary code
    + bsc#1184797, CVE-2021-21349: SSRF can lead to a remote
    attacker to request data from internal resources
    + bsc#1184380, CVE-2021-21350: arbitrary code execution
    + bsc#1184374, CVE-2021-21348: remote attacker could cause
    denial of service by consuming maximum CPU time
    + bsc#1184378, CVE-2021-21347: remote attacker to load and
    execute arbitrary code from a remote host
    + bsc#1184375, CVE-2021-21344: remote attacker could load and
    execute arbitrary code from a remote host
    + bsc#1184379, CVE-2021-21342: server-side forgery
    + bsc#1184377, CVE-2021-21341: remote attacker could cause a
    denial of service by allocating 100% CPU time
    + bsc#1184373, CVE-2021-21346: remote attacker could load and
    execute arbitrary code
    + bsc#1184372, CVE-2021-21345: remote attacker with sufficient
    rights could execute commands
    + bsc#1184376, CVE-2021-21343: replace or inject objects, that
    result in the deletion of files on the local host
- Add patch:
  * Revert-MXParser-changes.patch
    + revert changes that would force us to add new dependency</changelog>
</package>
<package pkgid="0c206ab41ef6dd94346154180642dc7b65fee503db9458e1bc6561f9227b5848" name="xstream" arch="src">
  <version epoch="0" ver="1.4.16" rel="3.8.1"/>
  <changelog author="fstrba@suse.com" date="1559649600">- Initial packaging of xstream 1.4.9</changelog>
  <changelog author="fstrba@suse.com" date="1610971200">- Upgrade to 1.4.14
  * fixes bsc#1180994, CVE-2020-26217
- Remove patches:
  * 0001-Prevent-deserialization-of-void.patch
  * xstream-1.4.9-javadoc.patch
    + integrated in upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1610971201">- Upgrade to 1.4.15
  * fixes bsc#1180146, CVE-2020-26258 and bsc#1180145,
    CVE-2020-26259</changelog>
  <changelog author="fstrba@suse.com" date="1618488000">- Upgrade to 1.4.16
  * Security fixes:
    + bsc#1184796, CVE-2021-21351: remote attacker to load and
    execute arbitrary code
    + bsc#1184797, CVE-2021-21349: SSRF can lead to a remote
    attacker to request data from internal resources
    + bsc#1184380, CVE-2021-21350: arbitrary code execution
    + bsc#1184374, CVE-2021-21348: remote attacker could cause
    denial of service by consuming maximum CPU time
    + bsc#1184378, CVE-2021-21347: remote attacker to load and
    execute arbitrary code from a remote host
    + bsc#1184375, CVE-2021-21344: remote attacker could load and
    execute arbitrary code from a remote host
    + bsc#1184379, CVE-2021-21342: server-side forgery
    + bsc#1184377, CVE-2021-21341: remote attacker could cause a
    denial of service by allocating 100% CPU time
    + bsc#1184373, CVE-2021-21346: remote attacker could load and
    execute arbitrary code
    + bsc#1184372, CVE-2021-21345: remote attacker with sufficient
    rights could execute commands
    + bsc#1184376, CVE-2021-21343: replace or inject objects, that
    result in the deletion of files on the local host
- Add patch:
  * Revert-MXParser-changes.patch
    + revert changes that would force us to add new dependency</changelog>
</package>
<package pkgid="5ad783c87bd385a92bba07b29ca3c7a145f0212b8e899d7cbe74e77ecdcc8d9d" name="xstream-benchmark" arch="noarch">
  <version epoch="0" ver="1.4.16" rel="3.8.1"/>
  <changelog author="fstrba@suse.com" date="1559649600">- Initial packaging of xstream 1.4.9</changelog>
  <changelog author="fstrba@suse.com" date="1610971200">- Upgrade to 1.4.14
  * fixes bsc#1180994, CVE-2020-26217
- Remove patches:
  * 0001-Prevent-deserialization-of-void.patch
  * xstream-1.4.9-javadoc.patch
    + integrated in upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1610971201">- Upgrade to 1.4.15
  * fixes bsc#1180146, CVE-2020-26258 and bsc#1180145,
    CVE-2020-26259</changelog>
  <changelog author="fstrba@suse.com" date="1618488000">- Upgrade to 1.4.16
  * Security fixes:
    + bsc#1184796, CVE-2021-21351: remote attacker to load and
    execute arbitrary code
    + bsc#1184797, CVE-2021-21349: SSRF can lead to a remote
    attacker to request data from internal resources
    + bsc#1184380, CVE-2021-21350: arbitrary code execution
    + bsc#1184374, CVE-2021-21348: remote attacker could cause
    denial of service by consuming maximum CPU time
    + bsc#1184378, CVE-2021-21347: remote attacker to load and
    execute arbitrary code from a remote host
    + bsc#1184375, CVE-2021-21344: remote attacker could load and
    execute arbitrary code from a remote host
    + bsc#1184379, CVE-2021-21342: server-side forgery
    + bsc#1184377, CVE-2021-21341: remote attacker could cause a
    denial of service by allocating 100% CPU time
    + bsc#1184373, CVE-2021-21346: remote attacker could load and
    execute arbitrary code
    + bsc#1184372, CVE-2021-21345: remote attacker with sufficient
    rights could execute commands
    + bsc#1184376, CVE-2021-21343: replace or inject objects, that
    result in the deletion of files on the local host
- Add patch:
  * Revert-MXParser-changes.patch
    + revert changes that would force us to add new dependency</changelog>
</package>
<package pkgid="986e6f232c70cc0509ceade22230f566cbe162f6c64b4bbe968af8230c44f6e6" name="xstream-javadoc" arch="noarch">
  <version epoch="0" ver="1.4.16" rel="3.8.1"/>
  <changelog author="fstrba@suse.com" date="1559649600">- Initial packaging of xstream 1.4.9</changelog>
  <changelog author="fstrba@suse.com" date="1610971200">- Upgrade to 1.4.14
  * fixes bsc#1180994, CVE-2020-26217
- Remove patches:
  * 0001-Prevent-deserialization-of-void.patch
  * xstream-1.4.9-javadoc.patch
    + integrated in upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1610971201">- Upgrade to 1.4.15
  * fixes bsc#1180146, CVE-2020-26258 and bsc#1180145,
    CVE-2020-26259</changelog>
  <changelog author="fstrba@suse.com" date="1618488000">- Upgrade to 1.4.16
  * Security fixes:
    + bsc#1184796, CVE-2021-21351: remote attacker to load and
    execute arbitrary code
    + bsc#1184797, CVE-2021-21349: SSRF can lead to a remote
    attacker to request data from internal resources
    + bsc#1184380, CVE-2021-21350: arbitrary code execution
    + bsc#1184374, CVE-2021-21348: remote attacker could cause
    denial of service by consuming maximum CPU time
    + bsc#1184378, CVE-2021-21347: remote attacker to load and
    execute arbitrary code from a remote host
    + bsc#1184375, CVE-2021-21344: remote attacker could load and
    execute arbitrary code from a remote host
    + bsc#1184379, CVE-2021-21342: server-side forgery
    + bsc#1184377, CVE-2021-21341: remote attacker could cause a
    denial of service by allocating 100% CPU time
    + bsc#1184373, CVE-2021-21346: remote attacker could load and
    execute arbitrary code
    + bsc#1184372, CVE-2021-21345: remote attacker with sufficient
    rights could execute commands
    + bsc#1184376, CVE-2021-21343: replace or inject objects, that
    result in the deletion of files on the local host
- Add patch:
  * Revert-MXParser-changes.patch
    + revert changes that would force us to add new dependency</changelog>
</package>
<package pkgid="4e02096fe721314294e6b71f389e7c833fc2c411b80d773d6e6d851d59cc151e" name="xstream-parent" arch="noarch">
  <version epoch="0" ver="1.4.16" rel="3.8.1"/>
  <changelog author="fstrba@suse.com" date="1559649600">- Initial packaging of xstream 1.4.9</changelog>
  <changelog author="fstrba@suse.com" date="1610971200">- Upgrade to 1.4.14
  * fixes bsc#1180994, CVE-2020-26217
- Remove patches:
  * 0001-Prevent-deserialization-of-void.patch
  * xstream-1.4.9-javadoc.patch
    + integrated in upstream sources</changelog>
  <changelog author="fstrba@suse.com" date="1610971201">- Upgrade to 1.4.15
  * fixes bsc#1180146, CVE-2020-26258 and bsc#1180145,
    CVE-2020-26259</changelog>
  <changelog author="fstrba@suse.com" date="1618488000">- Upgrade to 1.4.16
  * Security fixes:
    + bsc#1184796, CVE-2021-21351: remote attacker to load and
    execute arbitrary code
    + bsc#1184797, CVE-2021-21349: SSRF can lead to a remote
    attacker to request data from internal resources
    + bsc#1184380, CVE-2021-21350: arbitrary code execution
    + bsc#1184374, CVE-2021-21348: remote attacker could cause
    denial of service by consuming maximum CPU time
    + bsc#1184378, CVE-2021-21347: remote attacker to load and
    execute arbitrary code from a remote host
    + bsc#1184375, CVE-2021-21344: remote attacker could load and
    execute arbitrary code from a remote host
    + bsc#1184379, CVE-2021-21342: server-side forgery
    + bsc#1184377, CVE-2021-21341: remote attacker could cause a
    denial of service by allocating 100% CPU time
    + bsc#1184373, CVE-2021-21346: remote attacker could load and
    execute arbitrary code
    + bsc#1184372, CVE-2021-21345: remote attacker with sufficient
    rights could execute commands
    + bsc#1184376, CVE-2021-21343: replace or inject objects, that
    result in the deletion of files on the local host
- Add patch:
  * Revert-MXParser-changes.patch
    + revert changes that would force us to add new dependency</changelog>
</package>
<package pkgid="2a154d6085eb51aebaefb648fb32b1c58704ed650eb425f7113eec71ab9f8110" name="yaml-cpp" arch="src">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="c3a816ff9f8186afa996100bf24dfa11f22645364d7bc049afda5dd4475481ae" name="yaml-cpp-devel" arch="aarch64">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="2a4da5c4a3696316fa55558e9afc19b4fbc36b18a37bc073de7c06238e715c45" name="yaml-cpp-devel" arch="i586">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="59e56b8075c79ba7b631f863c86f87ccfaa6642c3be4f4f9d30248a0e7e7551b" name="yaml-cpp-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="2aae86b24ad04b85962033340b55db5d5058a12b14c565fd3f5a7530988a3693" name="yaml-cpp-devel" arch="s390x">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="e4e41e51da735ad57911d6e978e2689fa0d7b356df58574b10cf2bfc3ecfe498" name="yaml-cpp-devel" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="d667bb54ca91c0d92f6cdfc42ad8517785dcc18245c85f465e4b17b6b41f865d" name="yast2-auth-client" arch="noarch">
  <version epoch="0" ver="4.2.6" rel="3.3.1"/>
  <changelog author="hellcp@mailbox.org" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="dmulder@suse.com" date="1550232000">- yast auth-client and krb5.conf wrong domain_realm entry; (bsc#1122026)
- 4.1.1</changelog>
  <changelog author="hellcp@mailbox.org" date="1559304000">- Add metainfo (fate#319035)
- Revamp spec
- Replace GenericName with Comment
- 4.2.0</changelog>
  <changelog author="scabrero@suse.de" date="1561032000">- Fix an issue importing legacy XML based autoyast configuration;
  (bsc#1137380);
- Require network to be configured before importing autoyast
  configuration; (bsc#1136139);
- 4.2.1</changelog>
  <changelog author="schubi@suse.de" date="1566475200">- Using rb_default_ruby_abi tag in the spec file in order to
  handle several ruby versions (bsc#1146403).
- 4.2.2</changelog>
  <changelog author="scabrero@suse.de" date="1573214400">- Add missing domain setting 'ignore_group_members'; (bsc#1153547);
- 4.2.3</changelog>
  <changelog author="varkoly@suse.com" date="1578916800">- SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text in User Logon
  Management/Manage Domain User Login/Active Directory Enrollment dialog
  bsc#1083947</changelog>
  <changelog author="jjindrak@suse.cz" date="1580299200">- Default bind_policy to 'soft' if not present in the config
  (bsc#1162025).
- 4.2.4</changelog>
  <changelog author="scabrero@suse.de" date="1617624000">- Fix reading value of LDAP TLS setting (bsc#1181927);
- Fix cli 'help' handling for auth-client &amp; ldapkrb (bsc#1172340);
- 4.2.5</changelog>
  <changelog author="scabrero@suse.de" date="1620129600">- Fix an error importing the configuration when the json does not
  contain all keys; (bsc#1184630);
- Fix nss_ldap package unnecessarily installed; (bsc#1185499);
- 4.2.6</changelog>
</package>
<package pkgid="5e7230937e9fac6527dd1856feef62250a508d2c834fe395808f48d5bdf9d8c5" name="yast2-auth-client" arch="src">
  <version epoch="0" ver="4.2.6" rel="3.3.1"/>
  <changelog author="hellcp@mailbox.org" date="1542974400">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="dmulder@suse.com" date="1550232000">- yast auth-client and krb5.conf wrong domain_realm entry; (bsc#1122026)
- 4.1.1</changelog>
  <changelog author="hellcp@mailbox.org" date="1559304000">- Add metainfo (fate#319035)
- Revamp spec
- Replace GenericName with Comment
- 4.2.0</changelog>
  <changelog author="scabrero@suse.de" date="1561032000">- Fix an issue importing legacy XML based autoyast configuration;
  (bsc#1137380);
- Require network to be configured before importing autoyast
  configuration; (bsc#1136139);
- 4.2.1</changelog>
  <changelog author="schubi@suse.de" date="1566475200">- Using rb_default_ruby_abi tag in the spec file in order to
  handle several ruby versions (bsc#1146403).
- 4.2.2</changelog>
  <changelog author="scabrero@suse.de" date="1573214400">- Add missing domain setting 'ignore_group_members'; (bsc#1153547);
- 4.2.3</changelog>
  <changelog author="varkoly@suse.com" date="1578916800">- SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text in User Logon
  Management/Manage Domain User Login/Active Directory Enrollment dialog
  bsc#1083947</changelog>
  <changelog author="jjindrak@suse.cz" date="1580299200">- Default bind_policy to 'soft' if not present in the config
  (bsc#1162025).
- 4.2.4</changelog>
  <changelog author="scabrero@suse.de" date="1617624000">- Fix reading value of LDAP TLS setting (bsc#1181927);
- Fix cli 'help' handling for auth-client &amp; ldapkrb (bsc#1172340);
- 4.2.5</changelog>
  <changelog author="scabrero@suse.de" date="1620129600">- Fix an error importing the configuration when the json does not
  contain all keys; (bsc#1184630);
- Fix nss_ldap package unnecessarily installed; (bsc#1185499);
- 4.2.6</changelog>
</package>
<package pkgid="dd02bf5f29daa5bdd0d7c0a970ab27e60c889044492d894b66ca1334c3c105e3" name="yast2-migration" arch="noarch">
  <version epoch="0" ver="4.2.5" rel="3.3.1"/>
  <changelog author="schubi@suse.de" date="1539777600">- Added %license to spec file. Needed to build
  fix for bsc#1071757 again.
- 4.0.1</changelog>
  <changelog author="hellcp@mailbox.org" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1543492800">- Build fix, update unit tests related to the icon handling
  (boo#1109310)
- 4.1.1</changelog>
  <changelog author="lslezak@suse.cz" date="1559217600">- Fixes for the openSUSE Leap =&gt; SLES migration (jsc#SLE-7006)
  - Enable the openSUSE =&gt; SUSE vendor change
  - Disable all other repositories (esp. the default OSS and
    non-OSS repositories) which could collide with the new SLES
    repositories
- 4.1.2</changelog>
  <changelog author="hellcp@mailbox.org" date="1559304000">- Add metainfo (fate#319035)
- Revamp spec
- Replace GenericName with Comment
- 4.2.0</changelog>
  <changelog author="lslezak@suse.cz" date="1563537600">- Added "BuildRequires: update-desktop-files"
- Related to the previous desktop file changes (fate#319035)
- 4.2.1</changelog>
  <changelog author="schubi@suse.de" date="1566475200">- Using rb_default_ruby_abi tag in the spec file in order to
  handle several ruby versions (bsc#1146403).
- 4.2.2</changelog>
  <changelog author="jlopez@suse.com" date="1572264000">- Use new snapper machine-readable output to check whether snapper
  is configured (related to bsc#1149322).
- 4.2.3</changelog>
  <changelog author="schubi@suse.de" date="1574164800">- Using Y2Packager::Resolvable.any? and Y2Packager::Resolvable.find
  in order to decrease the required memory (bsc#1132650,
  bsc#1140037).
- 4.2.4</changelog>
  <changelog author="lslezak@suse.cz" date="1620820800">- Show the new base product license in online migration
  (bsc#1185808)
- 4.2.5</changelog>
</package>
<package pkgid="4bac5dc90f2196499bc529c043a4c0bfb046a3cf599d786cf71c2dd04f02bf01" name="yast2-migration" arch="src">
  <version epoch="0" ver="4.2.5" rel="3.3.1"/>
  <changelog author="schubi@suse.de" date="1539777600">- Added %license to spec file. Needed to build
  fix for bsc#1071757 again.
- 4.0.1</changelog>
  <changelog author="hellcp@mailbox.org" date="1543147200">- Provide icon with module (boo#1109310)
- 4.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1543492800">- Build fix, update unit tests related to the icon handling
  (boo#1109310)
- 4.1.1</changelog>
  <changelog author="lslezak@suse.cz" date="1559217600">- Fixes for the openSUSE Leap =&gt; SLES migration (jsc#SLE-7006)
  - Enable the openSUSE =&gt; SUSE vendor change
  - Disable all other repositories (esp. the default OSS and
    non-OSS repositories) which could collide with the new SLES
    repositories
- 4.1.2</changelog>
  <changelog author="hellcp@mailbox.org" date="1559304000">- Add metainfo (fate#319035)
- Revamp spec
- Replace GenericName with Comment
- 4.2.0</changelog>
  <changelog author="lslezak@suse.cz" date="1563537600">- Added "BuildRequires: update-desktop-files"
- Related to the previous desktop file changes (fate#319035)
- 4.2.1</changelog>
  <changelog author="schubi@suse.de" date="1566475200">- Using rb_default_ruby_abi tag in the spec file in order to
  handle several ruby versions (bsc#1146403).
- 4.2.2</changelog>
  <changelog author="jlopez@suse.com" date="1572264000">- Use new snapper machine-readable output to check whether snapper
  is configured (related to bsc#1149322).
- 4.2.3</changelog>
  <changelog author="schubi@suse.de" date="1574164800">- Using Y2Packager::Resolvable.any? and Y2Packager::Resolvable.find
  in order to decrease the required memory (bsc#1132650,
  bsc#1140037).
- 4.2.4</changelog>
  <changelog author="lslezak@suse.cz" date="1620820800">- Show the new base product license in online migration
  (bsc#1185808)
- 4.2.5</changelog>
</package>
<package pkgid="497dd3805223efa505d867b38fac81f13789d9b70e93207ef450f7729d35e8d8" name="yast2-network" arch="noarch">
  <version epoch="0" ver="4.2.99" rel="3.58.1"/>
  <changelog author="kanderssen@suse.com" date="1611316800">- Suggest to modify the VLAN interface name when the VLAN ID is
  modified (bsc#1174363)
- 4.2.90</changelog>
  <changelog author="kanderssen@suse.com" date="1613476800">- Improve the AutoYaST interfaces reader handling better the IP
  Addresses configuration. (bsc#1174353, bsc#1178107)
- 4.2.91</changelog>
  <changelog author="kanderssen@suse.com" date="1614340800">- Fixes some usability issues (bsc#1177834, bsc#1182781):
  - Disable "Edit" and "Delete" buttons when no interfaces
    are detected.
  - Disable the "Scan Network" button when the interface does not
    exist.
- 4.2.92</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1614686400">- Support both 'bridge_forwarddelay' and 'bridge_forward_delay'.
  The latter takes precedence (bsc#1180944).
- 4.2.93</changelog>
  <changelog author="mfilka@suse.com" date="1614772800">- bnc#1178260
  - fixed writing a record into /etc/hosts for static ips during
    AY installation
- 4.2.94</changelog>
  <changelog author="kanderssen@suse.com" date="1614772801">- Do not filter ethernet cards when configuring a bond in s390
  (bsc#1182911).
- Only propose a 1492 MTU size when configuring an LCS interface.
- 4.2.95</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1614859200">- Do not consider proposing 'nfsroot' as startmode when running on
  installation (bsc#1182818).
- 4.2.96</changelog>
  <changelog author="kanderssen@suse.com" date="1615982400">- Always provide the layer2 argument when activating a qeth device
  (bsc#1183639).
- 4.2.97</changelog>
  <changelog author="kanderssen@suse.com" date="1618574400">- Do not crash during an AutoYaST installation when trying to
  update the /etc/hosts using a connection without an IP address
  defined (bsc#1184883)
- 4.2.98</changelog>
  <changelog author="kanderssen@suse.com" date="1620820800">- Write IP addresses in order preventing an alias to set the
  primary IP address (bsc#1185967)
- 4.2.99</changelog>
</package>
<package pkgid="55060ddf040cc1221fbbb871cdac28d5354e278ee3589df9a414ca74e8f12348" name="yast2-network" arch="src">
  <version epoch="0" ver="4.2.99" rel="3.58.1"/>
  <changelog author="kanderssen@suse.com" date="1611316800">- Suggest to modify the VLAN interface name when the VLAN ID is
  modified (bsc#1174363)
- 4.2.90</changelog>
  <changelog author="kanderssen@suse.com" date="1613476800">- Improve the AutoYaST interfaces reader handling better the IP
  Addresses configuration. (bsc#1174353, bsc#1178107)
- 4.2.91</changelog>
  <changelog author="kanderssen@suse.com" date="1614340800">- Fixes some usability issues (bsc#1177834, bsc#1182781):
  - Disable "Edit" and "Delete" buttons when no interfaces
    are detected.
  - Disable the "Scan Network" button when the interface does not
    exist.
- 4.2.92</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1614686400">- Support both 'bridge_forwarddelay' and 'bridge_forward_delay'.
  The latter takes precedence (bsc#1180944).
- 4.2.93</changelog>
  <changelog author="mfilka@suse.com" date="1614772800">- bnc#1178260
  - fixed writing a record into /etc/hosts for static ips during
    AY installation
- 4.2.94</changelog>
  <changelog author="kanderssen@suse.com" date="1614772801">- Do not filter ethernet cards when configuring a bond in s390
  (bsc#1182911).
- Only propose a 1492 MTU size when configuring an LCS interface.
- 4.2.95</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1614859200">- Do not consider proposing 'nfsroot' as startmode when running on
  installation (bsc#1182818).
- 4.2.96</changelog>
  <changelog author="kanderssen@suse.com" date="1615982400">- Always provide the layer2 argument when activating a qeth device
  (bsc#1183639).
- 4.2.97</changelog>
  <changelog author="kanderssen@suse.com" date="1618574400">- Do not crash during an AutoYaST installation when trying to
  update the /etc/hosts using a connection without an IP address
  defined (bsc#1184883)
- 4.2.98</changelog>
  <changelog author="kanderssen@suse.com" date="1620820800">- Write IP addresses in order preventing an alias to set the
  primary IP address (bsc#1185967)
- 4.2.99</changelog>
</package>
<package pkgid="5d2822f60bc63295faac8c508bffec37b69d6c613083c3e3da421801604f0509" name="yast2-pkg-bindings" arch="aarch64">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="jreidinger@suse.com" date="1582718400">- Fix SourceRestore when some service is defined (bsc#1163081)
- 4.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1594382400">- Extensions to handle raw repository name (bsc#1172477)
- 4.2.8</changelog>
  <changelog author="lslezak@suse.cz" date="1597665600">- Fixed migration from SLE-HPC-12 with activated HPC module to
  SLE15-SP2 (fixed saving service files) (bsc#1171977)
- 4.2.9</changelog>
  <changelog author="lslezak@suse.cz" date="1601899200">- Return "nil" when a product package is not defined, missing
  value might cause a crash (bsc#1175681)
- 4.2.10</changelog>
  <changelog author="schubi@suse.de" date="1601899201">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-15184).
- 4.2.11</changelog>
  <changelog author="schubi@suse.de" date="1604318400">- Removed zypp::IdString conversion from vendor string.
  (Part from jsc#SLE-15184)
- 4.2.12</changelog>
  <changelog author="aschnell@suse.com" date="1606824000">- Expand URL when libzypp expects an expanded URL. Fixes weird zypp
  repository name generated during installation. (bsc#1173509)
- 4.2.13</changelog>
  <changelog author="lslezak@suse.cz" date="1609761600">- Set the previous "distro_target" option when restarting the
  package manager (bsc#1176275), fixes upgrade from SLE12 via SMT
- 4.2.14</changelog>
  <changelog author="lslezak@suse.cz" date="1611144000">- Allow filtering resolvables by RPM path, return RPM path
  for the product packages (related to bsc#1178688, bsc#1176276)
- 4.2.15</changelog>
  <changelog author="lslezak@suse.cz" date="1619524800">- Pkg.ProvidePackage() - download the latest package version from
  the repository, this ensures that the installer is updated with
  the latest packages from the installer updates repository
  (bsc#1185240)
- 4.2.16</changelog>
</package>
<package pkgid="5af095f4b00f9f38772b1c2dfc80c638aae3acca1bf0e1954c2dfcf36caea59b" name="yast2-pkg-bindings" arch="i586">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="jreidinger@suse.com" date="1582718400">- Fix SourceRestore when some service is defined (bsc#1163081)
- 4.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1594382400">- Extensions to handle raw repository name (bsc#1172477)
- 4.2.8</changelog>
  <changelog author="lslezak@suse.cz" date="1597665600">- Fixed migration from SLE-HPC-12 with activated HPC module to
  SLE15-SP2 (fixed saving service files) (bsc#1171977)
- 4.2.9</changelog>
  <changelog author="lslezak@suse.cz" date="1601899200">- Return "nil" when a product package is not defined, missing
  value might cause a crash (bsc#1175681)
- 4.2.10</changelog>
  <changelog author="schubi@suse.de" date="1601899201">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-15184).
- 4.2.11</changelog>
  <changelog author="schubi@suse.de" date="1604318400">- Removed zypp::IdString conversion from vendor string.
  (Part from jsc#SLE-15184)
- 4.2.12</changelog>
  <changelog author="aschnell@suse.com" date="1606824000">- Expand URL when libzypp expects an expanded URL. Fixes weird zypp
  repository name generated during installation. (bsc#1173509)
- 4.2.13</changelog>
  <changelog author="lslezak@suse.cz" date="1609761600">- Set the previous "distro_target" option when restarting the
  package manager (bsc#1176275), fixes upgrade from SLE12 via SMT
- 4.2.14</changelog>
  <changelog author="lslezak@suse.cz" date="1611144000">- Allow filtering resolvables by RPM path, return RPM path
  for the product packages (related to bsc#1178688, bsc#1176276)
- 4.2.15</changelog>
  <changelog author="lslezak@suse.cz" date="1619524800">- Pkg.ProvidePackage() - download the latest package version from
  the repository, this ensures that the installer is updated with
  the latest packages from the installer updates repository
  (bsc#1185240)
- 4.2.16</changelog>
</package>
<package pkgid="19b4eb6b97516b7d04758490e585d6fe055b52060fbdf76be122dbe48e8d71e3" name="yast2-pkg-bindings" arch="ppc64le">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="jreidinger@suse.com" date="1582718400">- Fix SourceRestore when some service is defined (bsc#1163081)
- 4.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1594382400">- Extensions to handle raw repository name (bsc#1172477)
- 4.2.8</changelog>
  <changelog author="lslezak@suse.cz" date="1597665600">- Fixed migration from SLE-HPC-12 with activated HPC module to
  SLE15-SP2 (fixed saving service files) (bsc#1171977)
- 4.2.9</changelog>
  <changelog author="lslezak@suse.cz" date="1601899200">- Return "nil" when a product package is not defined, missing
  value might cause a crash (bsc#1175681)
- 4.2.10</changelog>
  <changelog author="schubi@suse.de" date="1601899201">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-15184).
- 4.2.11</changelog>
  <changelog author="schubi@suse.de" date="1604318400">- Removed zypp::IdString conversion from vendor string.
  (Part from jsc#SLE-15184)
- 4.2.12</changelog>
  <changelog author="aschnell@suse.com" date="1606824000">- Expand URL when libzypp expects an expanded URL. Fixes weird zypp
  repository name generated during installation. (bsc#1173509)
- 4.2.13</changelog>
  <changelog author="lslezak@suse.cz" date="1609761600">- Set the previous "distro_target" option when restarting the
  package manager (bsc#1176275), fixes upgrade from SLE12 via SMT
- 4.2.14</changelog>
  <changelog author="lslezak@suse.cz" date="1611144000">- Allow filtering resolvables by RPM path, return RPM path
  for the product packages (related to bsc#1178688, bsc#1176276)
- 4.2.15</changelog>
  <changelog author="lslezak@suse.cz" date="1619524800">- Pkg.ProvidePackage() - download the latest package version from
  the repository, this ensures that the installer is updated with
  the latest packages from the installer updates repository
  (bsc#1185240)
- 4.2.16</changelog>
</package>
<package pkgid="dbb2f95dc8977ecd0331c08fab2288875f9248b2cc0a4ba70e170ee83403ba27" name="yast2-pkg-bindings" arch="s390x">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="jreidinger@suse.com" date="1582718400">- Fix SourceRestore when some service is defined (bsc#1163081)
- 4.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1594382400">- Extensions to handle raw repository name (bsc#1172477)
- 4.2.8</changelog>
  <changelog author="lslezak@suse.cz" date="1597665600">- Fixed migration from SLE-HPC-12 with activated HPC module to
  SLE15-SP2 (fixed saving service files) (bsc#1171977)
- 4.2.9</changelog>
  <changelog author="lslezak@suse.cz" date="1601899200">- Return "nil" when a product package is not defined, missing
  value might cause a crash (bsc#1175681)
- 4.2.10</changelog>
  <changelog author="schubi@suse.de" date="1601899201">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-15184).
- 4.2.11</changelog>
  <changelog author="schubi@suse.de" date="1604318400">- Removed zypp::IdString conversion from vendor string.
  (Part from jsc#SLE-15184)
- 4.2.12</changelog>
  <changelog author="aschnell@suse.com" date="1606824000">- Expand URL when libzypp expects an expanded URL. Fixes weird zypp
  repository name generated during installation. (bsc#1173509)
- 4.2.13</changelog>
  <changelog author="lslezak@suse.cz" date="1609761600">- Set the previous "distro_target" option when restarting the
  package manager (bsc#1176275), fixes upgrade from SLE12 via SMT
- 4.2.14</changelog>
  <changelog author="lslezak@suse.cz" date="1611144000">- Allow filtering resolvables by RPM path, return RPM path
  for the product packages (related to bsc#1178688, bsc#1176276)
- 4.2.15</changelog>
  <changelog author="lslezak@suse.cz" date="1619524800">- Pkg.ProvidePackage() - download the latest package version from
  the repository, this ensures that the installer is updated with
  the latest packages from the installer updates repository
  (bsc#1185240)
- 4.2.16</changelog>
</package>
<package pkgid="02d22b3bcfa6a4edeaa51d5689d3de3ecb16ed28deca31fbf69c73b2a1fa50e8" name="yast2-pkg-bindings" arch="src">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="jreidinger@suse.com" date="1582718400">- Fix SourceRestore when some service is defined (bsc#1163081)
- 4.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1594382400">- Extensions to handle raw repository name (bsc#1172477)
- 4.2.8</changelog>
  <changelog author="lslezak@suse.cz" date="1597665600">- Fixed migration from SLE-HPC-12 with activated HPC module to
  SLE15-SP2 (fixed saving service files) (bsc#1171977)
- 4.2.9</changelog>
  <changelog author="lslezak@suse.cz" date="1601899200">- Return "nil" when a product package is not defined, missing
  value might cause a crash (bsc#1175681)
- 4.2.10</changelog>
  <changelog author="schubi@suse.de" date="1601899201">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-15184).
- 4.2.11</changelog>
  <changelog author="schubi@suse.de" date="1604318400">- Removed zypp::IdString conversion from vendor string.
  (Part from jsc#SLE-15184)
- 4.2.12</changelog>
  <changelog author="aschnell@suse.com" date="1606824000">- Expand URL when libzypp expects an expanded URL. Fixes weird zypp
  repository name generated during installation. (bsc#1173509)
- 4.2.13</changelog>
  <changelog author="lslezak@suse.cz" date="1609761600">- Set the previous "distro_target" option when restarting the
  package manager (bsc#1176275), fixes upgrade from SLE12 via SMT
- 4.2.14</changelog>
  <changelog author="lslezak@suse.cz" date="1611144000">- Allow filtering resolvables by RPM path, return RPM path
  for the product packages (related to bsc#1178688, bsc#1176276)
- 4.2.15</changelog>
  <changelog author="lslezak@suse.cz" date="1619524800">- Pkg.ProvidePackage() - download the latest package version from
  the repository, this ensures that the installer is updated with
  the latest packages from the installer updates repository
  (bsc#1185240)
- 4.2.16</changelog>
</package>
<package pkgid="c2694a97762ee77e9274bda3b5c30eebdb8ddc3d0b8a115cdd20875794371a7d" name="yast2-pkg-bindings" arch="x86_64">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="jreidinger@suse.com" date="1582718400">- Fix SourceRestore when some service is defined (bsc#1163081)
- 4.2.7</changelog>
  <changelog author="aschnell@suse.com" date="1594382400">- Extensions to handle raw repository name (bsc#1172477)
- 4.2.8</changelog>
  <changelog author="lslezak@suse.cz" date="1597665600">- Fixed migration from SLE-HPC-12 with activated HPC module to
  SLE15-SP2 (fixed saving service files) (bsc#1171977)
- 4.2.9</changelog>
  <changelog author="lslezak@suse.cz" date="1601899200">- Return "nil" when a product package is not defined, missing
  value might cause a crash (bsc#1175681)
- 4.2.10</changelog>
  <changelog author="schubi@suse.de" date="1601899201">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-15184).
- 4.2.11</changelog>
  <changelog author="schubi@suse.de" date="1604318400">- Removed zypp::IdString conversion from vendor string.
  (Part from jsc#SLE-15184)
- 4.2.12</changelog>
  <changelog author="aschnell@suse.com" date="1606824000">- Expand URL when libzypp expects an expanded URL. Fixes weird zypp
  repository name generated during installation. (bsc#1173509)
- 4.2.13</changelog>
  <changelog author="lslezak@suse.cz" date="1609761600">- Set the previous "distro_target" option when restarting the
  package manager (bsc#1176275), fixes upgrade from SLE12 via SMT
- 4.2.14</changelog>
  <changelog author="lslezak@suse.cz" date="1611144000">- Allow filtering resolvables by RPM path, return RPM path
  for the product packages (related to bsc#1178688, bsc#1176276)
- 4.2.15</changelog>
  <changelog author="lslezak@suse.cz" date="1619524800">- Pkg.ProvidePackage() - download the latest package version from
  the repository, this ensures that the installer is updated with
  the latest packages from the installer updates repository
  (bsc#1185240)
- 4.2.16</changelog>
</package>
<package pkgid="829c79890197ad649c48322edbe2cf2c6c844d2c64347e98170fa6467382877a" name="yast2-pkg-bindings-devel-doc" arch="noarch">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="ma@suse.de" date="1207224000">- use repo name as mediaset label.</changelog>
  <changelog author="lslezak@suse.cz" date="1210939200">- documented lock API
- 2.16.35</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- avoid duplicated index.html in installed docs</changelog>
  <changelog author="lslezak@suse.cz" date="1359374400">- fixed documentation build (bnc#800692)
- 2.23.1</changelog>
  <changelog author="lslezak@suse.cz" date="1371211200">- removed obsolete BuildRequires (blocxx, libgcrypt, doxygen,
  perl-XML-Writer)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1382011200">- remove usage of dropped y2doc generator
- 3.1.1</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="schubi@suse.de" date="1600344000">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-14807).
- 3.1.2</changelog>
</package>
<package pkgid="91131f2badc665feea0b10270feca8b03998dfe686c44a43ec3583692049beff" name="yast2-pkg-bindings-devel-doc" arch="src">
  <version epoch="0" ver="4.2.16" rel="3.15.1"/>
  <changelog author="ma@suse.de" date="1207224000">- use repo name as mediaset label.</changelog>
  <changelog author="lslezak@suse.cz" date="1210939200">- documented lock API
- 2.16.35</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- avoid duplicated index.html in installed docs</changelog>
  <changelog author="lslezak@suse.cz" date="1359374400">- fixed documentation build (bnc#800692)
- 2.23.1</changelog>
  <changelog author="lslezak@suse.cz" date="1371211200">- removed obsolete BuildRequires (blocxx, libgcrypt, doxygen,
  perl-XML-Writer)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1382011200">- remove usage of dropped y2doc generator
- 3.1.1</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Switched license in spec file from SPDX2 to SPDX3 format.</changelog>
  <changelog author="schubi@suse.de" date="1600344000">- Added new call Pkg::SetAdditionalVendors (jsc#SLE-14807).
- 3.1.2</changelog>
</package>
<package pkgid="ffbd2f5b25c871c00dfe31f36d6543d3b70703f7bba3ad9101f06adbbfd0835c" name="zeromq" arch="src">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="50a227a4219964b441dddc80705c0157d9819adcc04fe5bd7001058498cb3fc9" name="zeromq-devel" arch="aarch64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="662a14a88152e0f4aa013844c8f32b3b301e4fe165e4d5be233fc03723300ee9" name="zeromq-devel" arch="i586">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="1ebebab530a51ce0fdd004f436a63fe66ee0a428183d7093aad0f4e17bd45bb1" name="zeromq-devel" arch="ppc64le">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="60f3454da97792b468238944559723df1284b987964a16fadde46c1c5371f29a" name="zeromq-devel" arch="s390x">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="162644a1ba9f0a46d648919a9a6bd8036c27f2d270ec64d63c19000de1d99974" name="zeromq-devel" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="ea7ee2b26542a7a1c0214eeff6310bcfad2240ba132269c63b3566e1f9ca1c2a" name="zeromq-tools" arch="aarch64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="ceac0d6bb5667f0a0cfb1d0752068528aa7b412efbbc005e01e2c625c0c81de5" name="zeromq-tools" arch="i586">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="386e91dbbe3c8f82d1ecac82d747977762b20ffb4a6c141355ac234e90d468b6" name="zeromq-tools" arch="ppc64le">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="cc49afc7fbc418c7f0e841884069d546854c078ef42180e95461ac8ab3d7b256" name="zeromq-tools" arch="s390x">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="0f656397bd40e2da47e50d378d6fb403f2c40bbd55624251d937226300521d0d" name="zeromq-tools" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="bb6699bfef0fec59bde36165b880eea539ce56fe17b8ed8c9de8c0e27ab54f7a" name="zypper" arch="aarch64">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="2b461ec4f617f7b6502e7591e61852df81dd61dae61b3abc77bec6c4f675a4ac" name="zypper" arch="i586">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="dd2573a7fb4ee002ec38a163c2ef63fa7d9f10da882bfda6545ea451413b1aee" name="zypper" arch="ppc64le">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="20c7d339b9407ebd24f3a15908b259491ce7914b16c1f0a23c63dacf00df6fd7" name="zypper" arch="s390x">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="6b30bb8b7b59c5fa91030dee21fe56bffbe3bd60c386ec143a50f55fadf08766" name="zypper" arch="src">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="226637f21b983d21314b3a1059be2e4f27277100b8e520e30ce43f677eab162e" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="961a7d41518b20b8f348e94cbf2acc299660c997f1451787a4f4edb3af3fe26a" name="zypper-aptitude" arch="noarch">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="5d1eb8d913fafcf6387fa210505193b206def81334eaba7806439a56cc88f12b" name="zypper-log" arch="noarch">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
<package pkgid="3d865ab1ceb771b8b1aa0157e547656c581a2f04024516bcec55943812d28ead" name="zypper-needs-restarting" arch="noarch">
  <version epoch="0" ver="1.14.44" rel="7.1"/>
  <changelog author="ma@suse.de" date="1584705600">- Tag 'retracted' patch status in info and list-patches (jsc#SLE-8770)
- Tag 'R'etracted items in search tabes status columns (jsc#SLE-8770)
- Relax 'Do not allow the abbreviation of cli arguments' in
  legacy distibutions (bsc#1164543)
- Correctly detect ambigous switch abbreviations (bsc#1165573)
- zypper-aptitude: don't supplement zypper.
  supplementing zypper means zypper-aptitude gets installed by
  default and pulls in perl. Neither is desired on small systems.
- BuildRequires:  libzypp-devel &gt;= 17.23.2.
- version 1.14.35</changelog>
  <changelog author="ma@suse.de" date="1586779200">- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36</changelog>
  <changelog author="bzeller@suse.de" date="1592222400">- Print switch abbrev warning to stderr (bsc#1172925)
- Fix typo in man page (bsc#1169947)
- version 1.14.37</changelog>
  <changelog author="ma@suse.de" date="1598616000">- Directly list subcommands in 'zypper help' (bsc#1165424)
- man: enhance description of the global package cache (bsc#1175592)
- Remove extern C block wrapping augeas.h as it breaks the build
  on Arch Linux.
- Point out that plaindir repos do not follow symlinks (bsc#1174561)
- Fix help command for list-patches
- man: Point out that plain rpm packages are not downloaded to the
  global package cache (bsc#1173273)
- version 1.14.38</changelog>
  <changelog author="ma@suse.de" date="1600430400">- Use new testcase API in libzypp.
- BuildRequires:  libzypp-devel &gt;= 17.25.0.
- help: prevent 'whatis' from writing to stderr (bsc#1176712)
- wp: point out that command is aliased to a search command and
  searches case-insensitive (jsc#SLE-16271)
- version 1.14.39</changelog>
  <changelog author="ma@suse.de" date="1601035200">- info: Assume descriptions starting with '&lt;p&gt;' are richtext
  (bsc#935885)
- version 1.14.40</changelog>
  <changelog author="ma@suse.de" date="1606478400">- Avoid translated text in xml attributes ( fixes #361 )
- BuildRequires:  libzypp-devel &gt;= 17.25.3.
  Adapt to new LoadTestcase API.
- version 1.14.41</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
</package>
</otherdata>